| 标题 | www.horilla.com horilla 1.2.1 Remote Code Execution |
|---|
| 描述 | Multiple remote command execution vulnerabilities were found in horilla. Multiple handlers in horilla did not perform reasonable privilege checks, allowing request parameters from external sources to be passed into the eval() method, which ultimately led to the vulnerabilities. |
|---|
| 来源 | ⚠️ https://github.com/Sp1d3rL1/horilla-RCE |
|---|
| 用户 | sp1d3r (UID 77907) |
|---|
| 提交 | 2024-11-24 16時57分 (2 年前) |
|---|
| 管理 | 2024-12-04 09時48分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 286858 [horilla 直到 1.2.1 权限提升] |
|---|
| 积分 | 18 |
|---|