CVE-2023-27235

CVE-2023-27235 affects Jizhicms v2.4.5 in the admin/c/CommonController.php component. The vulnerability allows arbitrary code execution via uploading a crafted .phtml file, enabling an attacker to run code on the server. CVSS 3.1 base score 7.2 (HIGH); network attack vector, low access complexity...

CVE-2023-27235

An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file...

CVE-2023-27235

An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file...