Closed FStac closed 5 years ago
File connector.minimal.php
is not used as part of QACMS, just there as part of vendor package.
And as far as I know, elFinder::exec()
is aimed to "execute" elFinder's API commands and no O.S. command, so I dont get what you mean by "excute remote command".
In the other hand, the test payload using CURL directly over a PHP file class is not even possible in QACMS, so I dont get what this proves.
Similar to: https://github.com/Studio-42/elFinder/issues/1018
even using input_filter() to filter $src at line150 with magic_quotes_gpc,str_replace and stripslashes,but it also can be bypass $src also can allow attacker input a command to excute.
TEST PAYLOAD: