| Название | publiccms PublicCMS <= V5.202506.d Remote Code Execution (RCE) |
|---|
| Описание | A critical path traversal vulnerability exists in the task template management system that allows authenticated administrators to write arbitrary files to the filesystem. By exploiting the weak path sanitization, an attacker can overwrite system scripts that are later executed by the scheduled task system, leading to remote code execution with server privileges.
|
|---|
| Источник | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/2 |
|---|
| Пользователь | Ana10gy (UID 93358) |
|---|
| Представление | 06.01.2026 16:05 (9 месяцы назад) |
|---|
| Модерация | 17.01.2026 09:58 (11 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 341703 [Sanluan PublicCMS до 5.202506.d Task Template Management TaskTemplateAdminController.java save path обход каталога] |
|---|
| Баллы | 18 |
|---|