Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

There is a Incorrect Access Control vulnerability in Dswjcms 1.6.4 #7

Open
5huai opened this issue May 14, 2019 · 0 comments
Open

There is a Incorrect Access Control vulnerability in Dswjcms 1.6.4 #7

5huai opened this issue May 14, 2019 · 0 comments

Comments

@5huai
Copy link

5huai commented May 14, 2019

Dswjcms 1.6.4 allowing an attacker to upload and execute arbitrary PHP code via the index.php/Dswjcms/Basis/resources.html.

Upload PHP File
Document content:<?php phpinfo();?>
image

Access this PHP file

http://127.0.0.1/Public/uploadify/uploads/test.php
image
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@5huai