Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated)
Vulnerability Description
NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated page content creation. Authenticated attackers can upload PHP files with arbitrary code to the server's pages directory by exploiting the page creation mechanism without proper input sanitization.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
NanoCMS 代码注入漏洞
Vulnerability Description
NanoCMS是kalyan02个人开发者的一个轻量级内容管理系统。 NanoCMS 0.4版本存在代码注入漏洞，该漏洞源于页面内容创建功能存在未经验证的文件上传漏洞，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A