mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
831 B
831 B
CVE-2024-27516
Description
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc_web/modules/lhfaq/faqweight.php.
POC
Reference
- https://github.com/LiveHelperChat/livehelperchat/issues/2054
- https://github.com/LiveHelperChat/livehelperchat/issues/2054