| 标题 | here is a file upload vulnerability OTCMS v6.0.1 |
|---|
| 描述 | OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details.OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for detailsOTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details |
|---|
| 来源 | ⚠️ https://gitee.com/wkstestete/cve/blob/master/upload/upload1.md |
|---|
| 用户 | wkstestete (UID 43375) |
|---|
| 提交 | 2023-03-24 04時21分 (4 年前) |
|---|
| 管理 | 2023-03-31 12時41分 (7 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 143256 [OTCMS 3.85 sysCheckFile_deal.php SELECT Statement 权限提升] |
|---|
| 积分 | 0 |
|---|