search

AntSwordProject / antSword

中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
https://www.yuque.com/antswordproject/antsword
MIT License
3.69k stars 579 forks source link

反向RCE漏洞 #255

Closed Creatoria closed 3 years ago

Creatoria commented 4 years ago

https://xz.aliyun.com/t/8167 问题函数为modules/database/asp与custom的updateResult

Medicean commented 4 years ago

感谢提供信息，经验证该问题只存在于 <=v2.1.6 版本。