Skip to content

yinfei6/classcms

main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 

classcms

The file management function module of Classcms<=3.5 has an arbitrary file upload vulnerability. Classcms modules are downloaded through its official website. All versions of the downloaded modules of the cms are the same. Therefore, as long as the functional module is installed, this vulnerability must exist. It belongs to full version pass kill. First, look at the code image image It can be said that the door is open. You can upload PHP directly without any interception. And this function does not match the upload blocking of the website itself. image image image

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published