Technical Tag
3 related articles.
0x00 Preface. Xu recently told me Qishi CMS had patched a problem in the global assign_resume_tpl function and asked whether it was exploitable. The official advisory points to /Application/Common/Controller/BaseController…
Affected version: V1.0.0.20200506 beta, the latest release. Requirement: the member center must be enabled in /application/config.php. Vulnerability analysis: lines 58–67 of /application/index/User.php. user_request_empty is a developer hook and can be ignored; the important part is return $thi…
0x01 Preface. Xu provided this vulnerability for me to analyze. 0x02 SeaCMS overview. SeaCMS is a PHP 5.x + MySQL video-on-demand system; FOFA shows over 400 instances. 0x03 Analysis. Vulnerable file: ./comme…