Translations:騎士CMS模版註入 &文件包含getshell漏洞/3/Chinese

From PwnWiki
Revision as of 14:53, 25 June 2021 by FuzzyBot (talk | contribs) (Importing a new version from external source)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

騎士 CMS 官方發布安全更新,修復了一處遠程代碼執行漏洞。由於騎士 CMS 某些函數存在過濾不嚴格,攻擊者通過構造惡意請求,配合文件包含漏洞可在無需登錄的情況下執行任意代碼,控制服務器。