leiyuyu041013
Results
1
issues of
leiyuyu041013
A RCE was found in system/datarec.php, the `$_POST[r_name]` is directly passed into the $mysqlstr, and is executed by exec, which causing a RCE.  POC: Firstly, start a nc listener:...