wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
comsenz crossday discuz\\! board 6.0.1 |
||
comsenz crossday discuz\\! board 7.0 |