| 标题 | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability |
|---|
| 描述 | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability.The problem is in app/admin/controller/Ajax.php in the lang function, the vulnerability can be in the framework does not open the multilingual when the inclusion of php files to achieve the effect of rce.YFCMF version is TP6-3.0.4 |
|---|
| 来源 | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.md |
|---|
| 用户 | p0ison (UID 37575) |
|---|
| 提交 | 2023-06-02 08時59分 (3 年前) |
|---|
| 管理 | 2023-06-02 13時28分 (4 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 230543 [YFCMF 直到 3.0.4 Ajax.php controllername 信息公开] |
|---|
| 积分 | 17 |
|---|