| Title | code-projects Online Bike Rental System v1.0 Incomplete Identification of Uploaded File Variables |
|---|
| Description | All files in changeimage *. php have incomplete identification of upload file variables. Hackers can directly upload files with any extension. If the content of the file contains malicious content, it may result in the loss of server permissions. |
|---|
| Source | ⚠️ https://github.com/Huandtx/cve/blob/main/cve/Online%20Bike%20Rental%20System/File_upload1.md |
|---|
| User | huandtx (UID 79079) |
|---|
| Submission | 01/06/2025 13:04 (6 months ago) |
|---|
| Moderation | 01/08/2025 18:16 (2 days later) |
|---|
| Status | Accepted |
|---|
| VulDB Entry | 290822 [code-projects Online Bike Rental System 1.0 Change Image unrestricted upload] |
|---|
| Points | 16 |
|---|