提交 #251669: 石家庄公诚勤朴科技有限公司 Dreamer CMS 4.1.3 File Upload/code execution/xss
| 标题 | 石家庄公诚勤朴科技有限公司 Dreamer CMS 4.1.3 File Upload/code execution/xss |
|---|---|
| 描述 | Modify filename to achieve any file upload, upload html code, execute, execute xss to obtain other users cooikes, csrf man-in the-middle attack, mount phishing websites and malicious networks |
| 来源 | ⚠️ https:/ |
| 用户 | hexixi (UID 59932) |
| 提交 | 2023-12-13 06時08分 (3 年前) |
| 管理 | 2023-12-24 08時57分 (11 days later) |
| 状态 | 已接受 |
| VulDB条目 | 248938 [Dreamer CMS 4.1.3 /upload/uploadFile file 权限提升] |
| 积分 | 16 |