| 标题 | XCMS 1.1 Unrestricted Upload |
|---|
| 描述 | XCMS's backend file upload interface lacks strict validation of uploaded file types, content, and file extensions. Attackers can upload malicious files of any format (such as PHP webshells) after logging in. Once uploaded successfully, attackers can directly access and execute the file via HTTP requests, ultimately leading to remote code execution. |
|---|
| 来源 | ⚠️ https://gitee.com/jackq/XCMS/issues/IDC5C8 |
|---|
| 用户 | formanagain (UID 93347) |
|---|
| 提交 | 2025-12-10 09時36分 (6 月前) |
|---|
| 管理 | 2025-12-27 00時14分 (17 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 338481 [jackq XCMS 直到 3fab5342cc509945a7ce1b8ec39d19f701b89261 Backend ProductImageController.class.php upload 文件 权限提升] |
|---|
| 积分 | 18 |
|---|