إرسال #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writesالمعلومات

عنوانhttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
الوصفA vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
المصدر⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
المستخدم
 J1rrY (UID 64327)
ارسال16/07/2024 10:25 AM (2 سنوات منذ)
الاعتدال20/07/2024 12:21 PM (4 days later)
الحالةتمت الموافقة
إدخال VulDB272072 [Prain حتى 1.3.0 HTTP POST Request /?import file تجاوز الصلاحيات]
النقاط16

Do you need the next level of professionalism?

Upgrade your account now!