Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Link | Tags |
---|---|
http://www.jianshu.com/p/b09d20af2374 | third party advisory exploit |