liufee CMS 代码问题漏洞

liufee CMS is a yii2 based CMS system by Chinese liufee individual developers. A security vulnerability exists in liufee CMS version 2.0.7.1. An attacker can exploit this vulnerability to execute arbitrary code via the image suffix function...

PT-2023-11578 · Unknown · Liufee Cms

Name of the Vulnerable Software and Affected Versions: liufee CMS version 2.0.7.1 Description: The issue allows a remote attacker to execute arbitrary code via the image suffix function. This is related to a File Upload vulnerability. Recommendations: For liufee CMS version 2.0.7.1, consider...