Submit #268418: ForU CMS ForU CMS dev Official version Local File Includeinfo

TitleForU CMS ForU CMS dev Official version Local File Include
DescriptionForU CMS在2020-06-23之前的版本中发现了一个被归类为关键的漏洞。该问题影响了文件channel.php.其对变量$t_path $channel['c_cmodel']的任意操纵导致了本地文件包含攻击。
Source⚠️ https://github.com/mi2acle/forucmsvuln/blob/master/LFI.md
User
 Mi2ac1e (UID 61142)
Submission01/16/2024 14:09 (2 years ago)
Moderation01/19/2024 12:06 (3 days later)
StatusAccepted
VulDB entry251552 [ForU CMS up to 2020-06-23 cms_admin.php a_name sql injection]
Points17

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!