提交 #706116: 如沐春 jizhicms V2.5.5 Fileupload
| 标题 | 如沐春 jizhicms V2.5.5 Fileupload |
|---|---|
| 描述 | Jizhicms has a vulnerability in its backend file upload mechanism. Attackers can modify the allowed file types in the backend and add files with the .phar extension, which can enable the upload and parsing of a Webshell. |
| 来源 | ⚠️ https:/ |
| 用户 | Dee.Mirage (UID 71702) |
| 提交 | 2025-12-04 08時55分 (10 月前) |
| 管理 | 2025-12-14 13時25分 (10 days later) |
| 状态 | 重复 |
| VulDB条目 | 223107 [Jizhicms 2.4.5 phtml File CommonController.php 权限提升] |
| 积分 | 0 |