إرسال #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writesالمعلومات

عنوانhttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
الوصفA vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
المصدر⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
المستخدم
 J1rrY (UID 64327)
ارسال16/07/2024 10:25 AM (2 سنوات منذ)
الاعتدال20/07/2024 12:21 PM (4 days later)
الحالةتمت الموافقة
إدخال VulDB272072 [Prain حتى 1.3.0 HTTP POST Request /?import file تجاوز الصلاحيات]
النقاط16

Want to know what is going to be exploited?

We predict KEV entries!