Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CScms 安全漏洞
Vulnerability Description
CScms是一套基于CI框架开发的内容管理系统（CMS）。 CScms 4.1版本中存在任意文件上传漏洞。攻击者可利用该漏洞将php扩展名添加到默认的文件类型列表（gif，jpg，png）中，然后在fileurl JSON数据中提交.php路径名称，上传PHP木马。
CVSS Information
N/A
Vulnerability Type
N/A