Zenar CMS 9.3 suffers from an unrestricted file upload vulnerability in its file management module, allowing authenticated attackers (with minimal privileges) to upload arbitrary files, including malicious PHP scripts, to the web server. # CVE-2022-44136-poc
Zenar CMS 9.3 suffers from an unrestricted file upload vulnerability in its file management module, allowing authenticated attackers (with minimal privileges) to upload arbitrary files, including malicious PHP scripts, to the web server. Due to insufficient file extension validation and improper sanitization, an attacker can execute arbitrary code on the target system by uploading a crafted payload (e.g., a web shell) and accessing it via the web root.
登录后查看神龙缓存的 POC 文件快照
登录查看