CVE-2023-46474

PMB =7.5.3 - 通过不受限制的文件上传实现远程代码执行 CVE-2023-46474 CVSS v3.1 Vector| CVSS v3.1 Score ---|--- AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H| 9.1 由 Devensys Cybersecurity 的 Marcus Reynaud 在渗透测试过程中发现 描述 脚本 pmb/admin/convert/startimport.php 存在 不受限制的文件上传 类型的漏洞，攻击者可借此在服务器上执行任意代码。 攻击者必须先获得该平台的管理访问权限 ，才能使用此功能。 该 PHP...

CVE-2023-46474

File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the startimport.php file...

CVE-2023-46474

Affected software : PMB v7.4.8. Vulnerability : file upload vulnerability enabling remote code execution and privilege escalation via a crafted PHP file uploaded to the start_import.php file. The underlying issue is an unlimited file upload vector that permits arbitrary code execution. Impact : r...