提交 #582295: https://gitee.com/chshcms/mccms mccms 2.7 Server-Side Request Forgery

The index () method in MCCMS 2.7 version sys/apps/controllers/api/Gf.php has
SSRF, which allows attackers to read arbitrary files or send network requests by
constructing pic parameters

• 来源: ⚠️ https://github.com/caigo8/CVE-md/blob/main/Mccms_V2.7/%E5%89%8D%E5%8F%B0SSRF.md
• 用户: huanyue (UID 62942)
• 提交: 2025-05-21 14時31分 (11 月前)
• 管理: 2025-05-29 10時39分 (8 days later)
• 状态: 已接受
• VulDB条目: 310497 [chshcms mccms 2.7 Gf.php index pic 权限提升]
• 积分: 17