CVE-2023-27235 Information

Description

An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.

Reference

https://github.com/Cherry-toto/jizhicms/issues/85