Description
A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MuYuCMS | 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7 | — |
References
- VDB-325921 | MuYuCMS Template Management admin.php code injection vdb-entry
- VDB-325921 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #654014 | MuYuCMS 2.7 rce third-party-advisory
- https://gitee.com/MuYuCMS/MuYuCMS/issues/ICXVCE issue-tracking