| 标题 | Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 phar Deserialization/RCE |
|---|
| 描述 | A vulnerability classified as critical has been discovered in the CRMEB open source mall system. This affects the downloadImage section of the file CopyTaobaoServices.php (authentication required). Manipulation of the images parameter causes phar deserialisation to enable arbitrary code execution. |
|---|
| 来源 | ⚠️ https://gist.github.com/J1rrY-learn/e15a1926a3b5a2b8805a15cb95eff1d7 |
|---|
| 用户 | J1rrY (UID 64327) |
|---|
| 提交 | 2024-07-13 19時21分 (2 年前) |
|---|
| 管理 | 2024-07-20 11時59分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 272065 [ZhongBangKeJi CRMEB 直到 5.4.0 CopyTaobaoServices.php downloadImage 权限提升] |
|---|
| 积分 | 17 |
|---|