Gửi #94481: MuYucms has Arbitrary code execution vulnerabilitythông tin

tiêu đềMuYucms has Arbitrary code execution vulnerability
Mô tảwe can construct packets after logging in and we will read the config file, and then we can Specify the remote url to download the file and save the downloaded file to the specified location. then we can access the specified file directory and find that the code was successfully executed.
Nguồn⚠️ https://github.com/MuYuCMS/MuYuCMS/issues/7
Người dùng
 kaga_cve (UID 41588)
Đệ trình25/02/2023 07:39 (cách đây 4 những năm)
Kiểm duyệt26/02/2023 13:20 (1 day later)
Trạng tháiđược chấp nhận
Mục VulDB221805 [MuYuCMS 2.2 getFile.html url nâng cao đặc quyền]
điểm20

Do you want to use VulDB in your project?

Use the official API to access entries easily!