Skip to content
OpenAdvisories
Unscored CVE-2023-27235 EUVD-2023-31015GHSA-8w2v-gr86-9vf3

An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitr…

Published Mar 15, 2023 · Updated Feb 27, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.

References