CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

Classcms 代码问题漏洞

ClassCMS is a simple, flexible, secure and easy to expand content management system from China. A security vulnerability exists in Classcms v2.5 and lower versions, where an attacker can perform code injection by uploading a carefully crafted .txt file via the component classclassupload...

CVE-2022-25581: Unrestricted Upload of File with Dangerous Type

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

PT-2022-17382

Name of the Vulnerable Software and Affected Versions Classcms versions 2.5 and below Description The issue allows attackers to execute code injection via a crafted .txt file, leveraging an arbitrary file upload vulnerability in the classupload component. Recommendations For Classcms versions 2.5...

File upload vulnerability in ClassCMS backend (CNVD-2021-35844)

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in ClassCMS

ClassCMS is a content management system. A file upload vulnerability exists in ClassCMS, which allows an attacker to upload a malicious file to getshell...

File Upload Vulnerability in ClassCMS Backend

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...