PRODUCT PROFILE

Pheditor

Created from vulnerability 18570 relation agent

关联漏洞

共找到 1 条公开漏洞记录

严重CVE-2026-48030远程代码执行2026/09/30

Pheditor 2.0.1-2.0.3 - OS Command Injection

Pheditor 2.0.1 to - 2.0.4 contains an OS command injection caused by improper sanitization of the 'dir' POST parameter in the terminal action handler, letting authenticated users execute arbitrary OS commands with web server privileges.

PoC 已收录RCEPheditor

CVSS9.9EPSS 7.5%