提交 #474965: wuzhicms 4.1.0 SSRF
| 标题 | wuzhicms 4.1.0 SSRF |
|---|---|
| 描述 | The test method in coreframe/app/search/admin/config.php does not filter the input sphinxhost and sphinxport parameters, allowing attackers to detect whether internal network ports are open |
| 来源 | ⚠️ https:/ |
| 用户 | LVZC (UID 74910) |
| 提交 | 2025-01-05 12時17分 (2 年前) |
| 管理 | 2025-01-15 13時00分 (10 days later) |
| 状态 | 已接受 |
| VulDB条目 | 291915 [wuzhicms 4.1.0 config.php test sphinxhost/sphinxport 权限提升] |
| 积分 | 15 |