Can I read PluXml RCE Vulnerability CVE-2022-25018 on EtoBox?

PluXml RCE Vulnerability CVE-2022-25018 by ilfabbro81 is a document available to read on EtoBox.

What is PluXml RCE Vulnerability CVE-2022-25018 about?

CVE-2022-25018 describes a remote code execution (RCE) vulnerability in PluXml PHP blogging platform version 5.8.7. A user with the manager role can inject arbitrary PHP code into static pages which is then executed on the server without sanitization of PHP tags. To exploit it, a manager only needs to edit an existing static page and insert PHP code between opening and closing tags, then save the changes to execute the code remotely. The vulnerability exists because PHP tags are not properly filtered from u

Author

ilfabbro81

Language

EN