| عنوان | https://www.sourcecodester.com Prison Management System v1.0 remote command/code execute |
|---|
| الوصف | A critical vulnerability has been discovered in the Online Courseware. This affects the add-admin.php file. No checks are made on the contents and suffixes of files uploaded by users, allowing attackers to upload php files containing malicious code and perform remote command execution. |
|---|
| المصدر | ⚠️ https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemRCE2.md |
|---|
| المستخدم | LI YU (UID 67398) |
|---|
| ارسال | 07/04/2024 02:35 PM (2 سنوات منذ) |
|---|
| الاعتدال | 07/04/2024 03:14 PM (39 minutes later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 259631 [SourceCodester Prison Management System 1.0 Avatar /Admin/add-admin.php avatar تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|