The most comprehensive summary of PHPCMS vulnerabilities

PHPCMS vulnerability summary is as follows:

1. Vulnerability name: Logic problem somewhere in phpcms Causes getshell

Patch file path: www/phpcms/libs/classes/attachment.class.php

Patch plan://m.sbmmt.com/ cms/phpcms/436117.html

2. Vulnerability name: phpcms authkey generation algorithm problem leads to authkey leakage

Patch file path: www/caches/configs /system.php

Patch plan://m.sbmmt.com/cms/phpcms/436123.html

3. Vulnerability name: phpcms front-end injection leads to arbitrary file reading vulnerability

Patch file path: www/phpcms/modules/content/down.php

Patch plan:https://www .php.cn/cms/phpcms/436128.html

4. Vulnerability name: phpcms SQL injection vulnerability file param.class.php

Patch File path: www/phpcms/libs/classes/param.class.php

Patch plan://m.sbmmt.com/cms/phpcms/436133.html(No. Five)

5. Vulnerability name: phpcms v9 wide byte injection vulnerability

Patch file path: www/phpcms/modules/pay/respond.php

Patch plan://m.sbmmt.com/cms/phpcms/436136.html

6. Vulnerability name: phpcms injection vulnerability file* poster.php *

Patch file path: www/phpcms/modules/poster/poster.php

Patch plan://m.sbmmt.com/ cms/phpcms/436141.html

7. Vulnerability name: phpcms injection vulnerability file * phpsso.php *

Patch file path: www/api / phpsso.php

Patch plan://m.sbmmt.com/cms/phpcms/436133.html(Article 7)

8. Vulnerability name: phpcms injection vulnerability file * index.php *

Patch file path: www/phpcms/modules/member/index.php

Patch plan://m.sbmmt.com/cms/phpcms/436133.html(Article 4)

The above is the detailed content of The most comprehensive summary of PHPCMS vulnerabilities. For more information, please follow other related articles on the PHP Chinese website!