Submit #427146: zzcms 2023 The file containsinfo

Titlezzcms 2023 The file contains
DescriptionThe Ebak_SetGotoPak method in the file 3/Ebbak5.1/upload/class/functions.php contains files, although it is limited to only files in the/3/Ebak5.1/upload/setsave/directory, it can be used in conjunction with SQL to write non PHP suffix file getshell. This method works wonders when restricting the writing of PHP file suffixes.
Source⚠️ https://github.com/LvZCh/zzcms2023/issues/6
User
 LVZC (UID 74910)
Submission10/20/2024 12:01 (2 years ago)
Moderation10/23/2024 09:53 (3 days later)
StatusAccepted
VulDB entry281562 [ZZCMS 2023 functions.php Ebak_SetGotoPak File unrestricted upload]
Points19

Do you know our Splunk app?

Download it now for free!