Submit #308188: sourcecodester Image Accordion Gallery App 1.0 Arbitrary File Upload / RCEinfo

Titlesourcecodester Image Accordion Gallery App 1.0 Arbitrary File Upload / RCE
DescriptionThe vulnerability enables arbitrary file uploads and potential remote code execution (RCE). Attackers can upload malicious files, posing as images, and execute code on the server. Mitigation requires implementing strict file type validation, content filtering, and access controls.
Source⚠️ https://github.com/Sospiro014/zday1/blob/main/Image_Accordion_Gallery.md
User
 SoSPiro (UID 67134)
Submission04/01/2024 10:56 AM (1 Year ago)
Moderation04/01/2024 11:11 AM (14 minutes later)
StatusAccepted
VulDB Entry258873 [SourceCodester Image Accordion Gallery App 1.0 /endpoint/add-image.php image_name unrestricted upload]
Points17

Do you know our Splunk app?

Download it now for free!