提交 #505009: esafenet DSM v3.1.2 Command Injection

A command injection vulnerability To RCE exists in the examExportPDF method of the AdminPlanController class. This vulnerability allows an attacker to execute arbitrary commands on the server by manipulating the s parameter in the request.

• 来源: ⚠️ https://github.com/666lail/report/blob/main/tmp/2.md
• 用户: 207556249 (UID 81808)
• 提交: 2025-02-21 12時33分 (2 年前)
• 管理: 2025-03-02 16時39分 (9 days later)
• 状态: 已接受
• VulDB条目: 298111 [ESAFENET DSM 3.1.2 examExportPDF s 权限提升]
• 积分: 16