high7.2
CVE-2023-27235
An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a craft…
Impact
An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jizhicms | Jizhicms | Version 2.4.5 |