提交 #408298: jeanmarc77 123Solar 1.8.4.5 Code Injection
| 标题 | jeanmarc77 123Solar 1.8.4.5 Code Injection |
|---|---|
| 描述 | 123Solar x.x.x.x contains a PHP Code Injection vulnerability. Attackers can inject arbitrary PHP commands into the PASSOx parameter, which can then be executed by other PHP scripts that include config/config_invt1.php. |
| 来源 | ⚠️ https:/ |
| 用户 | hejiasheng (UID 74892) |
| 提交 | 2024-09-14 08時31分 (2 年前) |
| 管理 | 2024-09-19 17時55分 (5 days later) |
| 状态 | 已接受 |
| VulDB条目 | 278162 [jeanmarc77 123solar 1.8.4.5 config/config_invt1.php PASSOx 权限提升] |
| 积分 | 17 |