New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

后台管理系统任意文件读取漏洞 #3762

Open

jinqi79731 opened this issue May 6, 2024 · 1 comment

jinqi79731 commented May 6, 2024

网站部署后攻防演练发现后台模版修改处插入特定恶意代码可以读取到服务器任意文件，属于高危漏洞，请问怎么修复

Contributor

starlying commented May 10, 2024

可以启用安全模式，参考：
https://sscms.com/docs/v7/getting-started/config/safe-mode.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment