CVE-2024-48180 PoC — ClassCMS 安全漏洞

介绍

[CVE ID]
CVE-2024-48180
[PRODUCT]
ClassCMS
[VERSION]
ClassCMS <=4.8
[VulnerabilityType Other]
file inclusion
[Vendor of Product]
https://classcms.com/
[Affected Component]
There is a file inclusion vulnerability in the nowView method in/class/cms/cms.php, which can include a txt file uploaded to the/class/template directory to execute PHP code
[Attack Type]
Remote

文件快照

备注