ESPCMS suffers from a command execution vulnerability (CNVD-2021-39839)

ESPCMS is an enterprise building management system based on PHP+MYSQL. A command execution vulnerability exists in ESPCMS, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in ESPCMS

ESPCMS is an enterprise building management system based on PHP+MYSQL. A command execution vulnerability exists in ESPCMS. The vulnerability stems from the program's failure to escape and filter strings when calling the eval function to process strings obtained from parameters, which can be...