CVE-2023-27235
An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code vi...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com