漏洞描述 远程代码执行漏洞是指攻击者通过某些漏洞在服务器上执行任意代码,这通常是由于应用程序对外部输入的验证不足或处理不当造成的。攻击者可以利用这个漏洞上传恶意代码或直接通过HTTP请求发送恶意代码,从而控制服务器,进行包括数据窃取、网站篡改、服务器资源滥用等在内的多种恶意行为。
相关漏洞推荐 hue-default-credential: Cloudera Hue Default Admin Login POC CVE-2005-3344: Horde Groupware Unauthenticated Admin Access POC CVE-2007-5728: phpPgAdmin <=4.1.1 - Cross-Site Scripting POC CVE-2008-5587: phpPgAdmin <=4.2.1 - Local File Inclusion POC CVE-2009-1151: PhpMyAdmin Scripts - Remote Code Execution POC CVE-2011-4926: Adminimize 1.7.22 - Cross-Site Scripting POC CVE-2015-2794: DotNetNuke 07.04.00 - Administration Authentication Bypass POC CVE-2015-2863: Kaseya Virtual System Administrator - Open Redirect POC CVE-2015-4127: WordPress Church Admin <0.810 - Cross-Site Scripting POC CVE-2016-1000126: WordPress Admin Font Editor <=1.8 - Cross-Site Scripting POC CVE-2016-1000138: WordPress Admin Font Editor <=1.8 - Cross-Site Scripting POC CVE-2016-5649: NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure POC CVE-2017-14524: OpenText Documentum Administrator 7.2.0180.0055 - Open Redirect