Description
smanga 3.1.9 及更早版本中的 SQL 注入漏洞允许远程攻击者执行任意代码,并通过 php/history/add.php 中的 mediaId、mangaId 和 userId 参数获取敏感信息。
Smanga /php/manga/delete.php 命令执行漏洞（CVE-2023-36076）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/zeroChen00/exp-poc/blob/main/Smanga%E6%9C%AA%E6%8E%88%E6%9D%83%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2023-36076).md
https://developer.aliyun.com/article/1333000
https://m.10100.com/article/59513030
https://cn-sec.com/archives/2013978.html
https://buaq.net/go-177312.html
https://nvd.nist.gov/vuln/detail/CVE-2023-36076
https://www.cnblogs.com/tdragon6/p/17749469.html
https://blog.fynn.vip/archives/cve-2023-36076rce-lou-dong-smanga-xi-tong