CVE-2021-26635

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code...

Stack overflow

In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code...

PHPCMS v9. 6. 2 arbitrary file read vulnerability

By diff found phpcms patch to modify the filtering$fileurl location and added the path in".."of the judgment. By fuzzing and read other about phpcms file read vulnerability analysis of the articles, found the following several ways the path can still bypass this patchwindows && a specific version...