| Title | JiZhiCMS is vulnerable to Unrestricted File Upload |
|---|
| Description | JiZhiCMS 2.4.5 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.This vulnerability is at the plugin, we can download the specified zip through the control url, and then unzip it to upload a Trojan. |
|---|
| Source | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/JiZhiCMS%20is%20vulnerable%20to%20Unrestricted%20File%20Upload%20which%20allows%20remote%20attackers%20to%20execute%20arbitrary%20code%20by%20uploading%20a%20php%20file.md |
|---|
| User | p0ison (UID 37575) |
|---|
| Submission | 06/01/2023 09:56 (3 years ago) |
|---|
| Moderation | 06/06/2023 12:20 (5 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 198451 [Jizhicms 1.9.5 update.html server-side request forgery] |
|---|
| Points | 0 |
|---|