Отправить #657903: YiFang YiFang CMS V2.0.0 Arbitrary File UploadИнформация

НазваниеYiFang YiFang CMS V2.0.0 Arbitrary File Upload
ОписаниеYiFang CMS has a arbitrary file upload vulnerability in the webUploader method of app/app/controller/File.php, where attackers can upload webshells to gain server privileges。 **You can download the product source code in https://gitee.com/wanglongcn/yifang. You can download the product source code in https://gitee.com/wanglongcn/yifang. You can download the product source code in https://gitee.com/wanglongcn/yifang.**
Источник⚠️ https://github.com/electroN1chahaha/YifangCMS-V2.0.0-Remote-Code-Execution-RCE-/issues/1
Пользователь
 electroN1c (UID 85481)
Представление18.09.2025 08:15 (1 Год назад)
Модерация28.09.2025 17:47 (10 days later)
Статуспринято
Запись VulDB326213 [YiFang CMS до 2.0.2 Backend File.php webUploader uploadpath эскалация привилегий]
Баллы20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!