LMXCMS Code Injection Vulnerability in Maintenance Component

A code injection vulnerability has been identified in LMXCMS version 1.41, specifically within the Maintenance component's db.inc.php file. This vulnerability allows attackers to inject arbitrary code, which can be executed remotely. The exploitation process is complex and requires a certain level of authentication.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where LMXCMS is hosted.

Reproduction

To reproduce this vulnerability, log into the admin panel and navigate to the database backup and restore module. Select any table for backup, then use the restore backup feature to access the file deletion interface. Delete the 'install_ok.txt' file, which triggers a system reset. During the database configuration process, inject a payload that writes a web shell into the db.inc.php file. Once the payload is executed, it will result in arbitrary code execution on the server.