CVE-2023-50692

File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the downloadurl parameter in the app/admin/exts/ directory...

CVE-2023-50692: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the downloadurl parameter in the app/admin/exts/ directory...

PT-2023-31607

Name of the Vulnerable Software and Affected Versions JIZHICMS version 2.5 Description The issue allows a remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the download url parameter in the app/admin/exts/ directory. This enables the attacker to potentially...