SSCMS 路径遍历漏洞

SSCMS SiteServerCMS is a content management system developed by SSCMS Corporation in China. Versions of SSCMS 7.4.0 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the parameter path in the function PathUtils.RemoveParentPath used in files...

PT-2020-21198

Name of the Vulnerable Software and Affected Versions strapi versions prior to 3.0.0-beta.17.8 Description The issue is related to Command Injection due to the failure to sanitize plugin names in the "/admin/plugins/install/" route. This may allow an authenticated attacker with admin privileges t...