| 标题 | shopxo v6.5 Remote Code Execution |
|---|
| 描述 | There is a vulnerability in the Payment.php file of ShopXO v6.5.0 that allows an attacker to execute arbitrary PHP code via a crafted zip file upload. The vulnerability occurs due to improper file handling and lack of adequate validation when extracting files from a zip archive.
|
|---|
| 来源 | ⚠️ https://github.com/147536951/Qiany1/blob/main/shopxo6.5.pdf |
|---|
| 用户 | Qianyi (UID 71159) |
|---|
| 提交 | 2025-05-02 09時05分 (1 年前) |
|---|
| 管理 | 2025-05-23 08時28分 (21 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 310085 [zongzhige ShopXO 6.5.0 ZIP File Payment.php Upload params 权限提升] |
|---|
| 积分 | 17 |
|---|