提交 #643500: MiczFlor RPi-Jukebox-RFID 2.8.0 Command Injection

RCE vulnerability in RPi-Jukebox-RFID v2.8.0 of file //htdocs/api/playlist/single.php of param "playlist".The manipulation results in Remote Privilege Escalation. The attack can be executed remotely.

• 来源: ⚠️ https://github.com/YZS17/CVE/blob/main/RPi-Jukebox-RFID/rce3.md
• 用户: XU17 (UID 83703)
• 提交: 2025-08-28 20時18分 (1 年前)
• 管理: 2025-09-12 10時34分 (15 days later)
• 状态: 已接受
• VulDB条目: 323752 [MiczFlor RPi-Jukebox-RFID 直到 2.8.0 single.php playlist 权限提升]
• 积分: 17