| عنوان | flute-cms.com Web-based CMS for server games written on PHP v0.2.2.4-alpha File Upload |
|---|
| الوصف | By registering an account and logging in, you can upload PHP files on the avatar upload page, but it requires modifying the header information of the PHP file to bypass detection.
Register a user and log in, modify the user avatar, upload a PHP file, and add the header GIF89a.
Source code：https://github.com/Flute-CMS/cms/releases
|
|---|
| المصدر | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE5-1.md |
|---|
| المستخدم | Dee.Mirage (UID 71702) |
|---|
| ارسال | 16/07/2024 07:21 AM (2 سنوات منذ) |
|---|
| الاعتدال | 20/07/2024 12:06 PM (4 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 272067 [Flute CMS 0.2.2.4-alpha Avatar Upload Page ImagesController.php avatar تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|