CVE-2023-38948

creationtimestamp| type| source ---|---|--- 2023-08-03 20:40:14+00:00| seen| https://t.me/cibsecurity/67717...

CVE-2023-38948

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin...

CVE-2023-38948

CVE-2023-38948 impacts jizhi CMS version 1.9.5, with the vulnerability located in the /c/PluginsController.php component. The issue allows an attacker to achieve arbitrary code execution by downloading a crafted plugin, i.e., an arbitrary file download vulnerability leading to code execution. The...