| 标题 | wtcms cms 1.0 RCE |
|---|
| 描述 | A critical Remote Code Execution vulnerability has been identified in the frontend component of WTCMS 1.0. The vulnerability allows unauthenticated attackers to write arbitrary PHP code to the server by exploiting improper handling of the content parameter in the fetch function. This vulnerability can be exploited without any authentication, making it particularly severe. |
|---|
| 来源 | ⚠️ https://github.com/TiKi-r/CVE-Report/blob/main/WtcmsRCE.md |
|---|
| 用户 | sT1TcH (UID 91291) |
|---|
| 提交 | 2025-11-05 12時20分 (11 月前) |
|---|
| 管理 | 2025-11-29 14時02分 (24 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 333790 [taosir WTCMS 直到 01a5f68a3dfc2fdddb44eed967bb2d4f60487665 /index.php fetch content 权限提升] |
|---|
| 积分 | 17 |
|---|