high8.8
CVE-2024-31759
An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function.
Impact
An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Publiccms | Publiccms | Version 4.0.202302.e |
Weakness classification
References
- NVD record
- CVE.org record
- https://1drv.ms/v/s%21AmTWEcd1YDpUjgoJ8lkA8pN8zYEJ?e=gIlbGf
- https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
- https://github.com/menghaining/PoC/blob/main/PublicCMS/publishCMS--PoC.md
- https://1drv.ms/v/s%21AmTWEcd1YDpUjgoJ8lkA8pN8zYEJ?e=gIlbGf
- https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
- https://github.com/menghaining/PoC/blob/main/PublicCMS/publishCMS--PoC.md