提交 #487032: yitong cmseasy CMSEASY 7.7.7.9 Code Injection
| 标题 | yitong cmseasy CMSEASY 7.7.7.9 Code Injection |
|---|---|
| 描述 | In lib/tool/functions.php:2535, an attacker can exploit arbitrary file include vulnerability through path parameter and use php filter chain to invoke RCE. |
| 来源 | ⚠️ https:/ |
| 用户 | n0el4kls (UID 80089) |
| 提交 | 2025-01-22 04時34分 (2 年前) |
| 管理 | 2025-02-02 08時56分 (11 days later) |
| 状态 | 重复 |
| VulDB条目 | 263397 [CmsEasy 7.7.7.9 template_admin.php file_get_contents 权限提升] |
| 积分 | 0 |