Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via an admin.system.files (aka Manage Files) request to the default URI, then accessing the file via a direct request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gowon Designs Leap CMS 'admin.system.files'访问控制漏洞
Vulnerability Description
Leap CMS是一款小巧的单文件内容管理系统解决方案。 Leap CMS 0.1.4版本中存在无限制文件上传漏洞.远程攻击者通过上传一个具有可执行扩展名的文件并可以借助对默认URI的一个admin.system.files(又称Manage Files)的直接请求来访问该文件，以执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A