Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/11/2022 Updated: 17/11/2022

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 0

Siyucms v6.1.7 exists to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management system based on ThinkPaP5 AdminLTE. SIYUCMS has a background command execution vulnerability, which can be used by malicious users to gain server privileges

Vulnerable Product	Search on Vulmon	Subscribe to Product
siyucms siyucms 6.1.7

siyu

CVE-2022-43030 1、Log in to the website background with the default weak password (admin/admin) 2、Click System Management ->Template Management 3、Edit user_ Login file, writing malicious code 4、connect webshell

CWE-521 https://github.com/cai-niao98/siyu https://github.com/cai-niao98/siyu/blob/main/README.md https://nvd.nist.gov https://github.com/cai-niao98/siyu

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-43030

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect