提交 #374413: Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 Arbitrary file reading信息

标题Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 Arbitrary file reading
描述A vulnerability classified as critical has been discovered in the CRMEB open source mall system. This affects the get_image_base64 section of the file PublicController.php. Manipulation of the image/code parameter results in arbitrary file reads.
来源⚠️ https://gist.github.com/J1rrY-learn/93a0cf71894570f4eb39344161beb44c
用户
 J1rrY (UID 64327)
提交2024-07-13 22時17分 (2 年前)
管理2024-07-20 11時59分 (7 days later)
状态已接受
VulDB条目272066 [ZhongBangKeJi CRMEB 直到 5.4.0 PublicController.php get_image_base64 file 权限提升]
积分17

Interested in the pricing of exploits?

See the underground prices here!