Skip to content
OpenAdvisories
Unscored CVE-2023-38948 EUVD-2023-42708GHSA-p39h-6928-4fq5

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary…

Published Aug 3, 2023 · Updated Oct 17, 2024 · Assigned by mitre

Description

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.

References