phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 최근 우리는 phpcms 2008 소스 코드의 /type.php에서 취약점을 발견했습니다. 공격자가 "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss"와 같은 조작된 요청을 보내면, 악성 콘텐트이 경우 "@unlinkFILE;assert$POST1;"가 phpcms 2008 웹사이트의 캐시 파일이 경우 "/cachetemplate/rss.tpl.php"에 기록됩니다. /type.php에는 다음 코드가 있습니다:...

PHPCMS 2008 - Remote Code Execution via Template Injection

PHPCMS 2008 suffers from an unauthenticated RCE via template injection in type.php, where attacker-supplied content is written into a PHP template cache file, which is then executable. id: CVE-2018-19127 info: name: PHPCMS 2008 - Remote Code Execution via Template Injection author: tomaquet18...

EUVD-2011-0662

Malware in sbrugna...

EUVD-2008-0523

Malware in sbrugna...

EUVD-2011-0663

Malware in sbrugna...

EUVD-2020-14964

Malware in sbrugna...

EUVD-2006-3016

Malware in sbrugna...

EUVD-2021-23028

Malware in sbrugna...

EUVD-2019-2091

Malware in sbrugna...

EUVD-2004-1200

Malware in sbrugna...

EUVD-2013-5773

Malware in sbrugna...

EUVD-2005-1842

Malware in sbrugna...

EUVD-2020-14968

Malware in sbrugna...

EUVD-2020-14966

Malware in sbrugna...

EUVD-2018-6317

Malware in sbrugna...

EUVD-2004-1199

Malware in sbrugna...

EUVD-2018-6822

Malware in sbrugna...

EUVD-2020-14965

Malware in sbrugna...

EUVD-2021-28065

Malicious code in bioql PyPI...

CVE-2021-40910

There is a reflective cross-site scripting XSS vulnerability in the PHPCMS V9.6.3 management side...