Title | itsourcecode Farm Management System 1.0 Code Injection |
---|
Description | In the add-pig.php file of the "Farm Management System In PHP" project, attackers can upload malicious code files through the parameter $res1_name. Due to the lack of proper validation and sanitation of the uploaded files, attackers are able to directly upload malicious files to the server, leading to the risk of arbitrary code execution. |
---|
Source | ⚠️ https://github.com/yunhai666/cve/issues/2 |
---|
User | weiwei-abc (UID 80329) |
---|
Submission | 01/18/2025 12:15 PM (2 months ago) |
---|
Moderation | 01/19/2025 09:00 PM (1 day later) |
---|
Status | Accepted |
---|
VulDB Entry | 292600 [itsourcecode Farm Management System up to 1.0 /add-pig.php pigphoto unrestricted upload] |
---|
Points | 19 |
---|