| 标题 | LeptonCMS 7.2.0 Command Injection |
|---|
| 描述 | An Arbitrary File Upload vulnerability exists in LeptonCMS v7.2.0. This vulnerability is due to the application's lack of effective validation for uploaded files. An authenticated attacker can exploit this vulnerability to execute arbitrary code by uploading a specially crafted ZIP file.. |
|---|
| 来源 | ⚠️ https://github.com/CVE-Hunter-Leo/CVE/issues/6 |
|---|
| 用户 | CW.Wong (UID 88449) |
|---|
| 提交 | 2025-08-11 16時34分 (1 年前) |
|---|
| 管理 | 2025-08-13 15時16分 (2 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 259032 [Lepton 7.1.0 PHP File 权限提升] |
|---|
| 积分 | 0 |
|---|