NUUO Crystal Server 3.19.0.85 allows unauthenticated PHP upload to RCE
Uploaded PHP can execute through FastCGI as the web service account, rated 9.8 Critical.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
Uploaded PHP can execute through FastCGI as the web service account, rated 9.8 Critical.
Today 617 readers · 742 views · 563 reads · all time 158K views