إرسال #163001: VIP-video-analysis system exists in SSRF vulnerability unauthorized in data/title.phpالمعلومات

عنوانVIP-video-analysis system exists in SSRF vulnerability unauthorized in data/title.php
الوصفThe reason for the formation of SSRF is mostly due to the server providing the function of obtaining data from other server applications without filtering and restricting the target address. For example, obtaining web page text content from a specified URL address, loading images from the specified address, downloading, and so on. The system has an SSRF vulnerability in data/title.php
المصدر⚠️ https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/VIP-video-analysis/SSRF.md
المستخدم
 webray.com.cn (UID 24778)
ارسال31/05/2023 11:59 AM (3 سنوات منذ)
الاعتدال31/05/2023 03:04 PM (3 hours later)
الحالةتمت الموافقة
إدخال VulDB230359 [yiwent Vip Video Analysis 1.0 data/title.php titurl تجاوز الصلاحيات]
النقاط19

Want to know what is going to be exploited?

We predict KEV entries!

n $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0'; } } ?>