Code injection

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

CVE-2022-25581

CVE-2022-25581 affects Classcms v2.5 and earlier. The issue is an arbitrary file upload via the class\classupload component, which can allow code execution through a crafted .txt file. The vulnerability is documented across multiple feeds (NVD/Red Hat/OSV etc.) with no publicly provided patch det...

CVE-2022-25581

Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file...

Classcms 代码问题漏洞

ClassCMS is a simple, flexible, secure and easy to expand content management system from China. A security vulnerability exists in Classcms v2.5 and lower versions, where an attacker can perform code injection by uploading a carefully crafted .txt file via the component classclassupload...

File upload vulnerability in ClassCMS backend (CNVD-2021-35844)

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in ClassCMS

ClassCMS is a content management system. A file upload vulnerability exists in ClassCMS, which allows an attacker to upload a malicious file to getshell...

File Upload Vulnerability in ClassCMS Backend

ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...