Description
rescan.php 接口存在远程命令执行,原因是rescan.php接口中 mediaId参数没有过滤`` 导致rce
smanga rescan.php 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-70831
https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70831
https://cn-sec.com/archives/4335504.html
https://www.sentinelone.com/vulnerability-database/cve-2025-70831/
https://vuldb.com/vuln/347131
https://github.com/advisories/GHSA-pfgm-6983-f589
https://access.redhat.com/security/cve/cve-2025-70831