| 标题 | FoxCMS <=1.2 Config injection |
|---|
| 描述 | FoxCMS versions ≤1.2 have a critical remote code execution (RCE) vulnerability in the /install/installdb.php file. An attacker can exploit this vulnerability by injecting malicious code into the database password field, which gets written to the configuration file and subsequently executed. This allows the attacker to gain remote code execution on the server. |
|---|
| 来源 | ⚠️ https://note.zhaoj.in/share/iDCwOv9vfDTI |
|---|
| 用户 | glzjin (UID 59815) |
|---|
| 提交 | 2024-12-22 11時37分 (2 年前) |
|---|
| 管理 | 2024-12-22 17時47分 (6 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 289170 [FoxCMS 直到 1.2 Configuration File /install/installdb.php database password 权限提升] |
|---|
| 积分 | 18 |
|---|