Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

An issue was discovered in WTcms. there is an Backstage editor getshell Vulnerability #3

Open
Assassins-white opened this issue Feb 18, 2019 · 0 comments
Open

An issue was discovered in WTcms. there is an Backstage editor getshell Vulnerability #3

Assassins-white opened this issue Feb 18, 2019 · 0 comments

Comments

@Assassins-white
Copy link

Assassins-white commented Feb 18, 2019 •
edited
Loading

The attacker opens Setting - Mailbox configuration - Registration email template,upload the image through the editor, burbsuite capture the package and change the Suffix, you can upload any file.
1
2
3
4
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Assassins-white