Отправить #506657: hzmanyun.com education and training system v2.1 Command Injection To RCEИнформация

Названиеhzmanyun.com education and training system v2.1 Command Injection To RCE
ОписаниеThe code snippet provided contains a vulnerability that allows an attacker to execute arbitrary commands on the server, leading to Remote Code Execution (RCE) due to improper handling of user input.
Источник⚠️ https://github.com/heiheixz/report/blob/main/nxb_1.md
Пользователь
 heihei_XZ (UID 81980)
Представление25.02.2025 14:25 (2 лет назад)
Модерация04.03.2025 14:50 (7 days later)
Статуспринято
Запись VulDB298520 [hzmanyun Education and Training System 2.1 /user/exportPDF id эскалация привилегий]
Баллы16

Do you want to use VulDB in your project?

Use the official API to access entries easily!