إرسال #393375: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUploadالمعلومات

عنوانChengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUpload
الوصفIn the FileManagerController.php controller, the rename method can modify the name of the file, but due to improper filtering, attackers can directly modify the file suffix to php file.
المصدر⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE4-2.md
المستخدم
 wanglun (UID 73616)
ارسال18/08/2024 09:59 AM (2 سنوات منذ)
الاعتدال26/08/2024 09:22 AM (8 days later)
الحالةتمت الموافقة
إدخال VulDB275762 [Chengdu Everbrite Network Technology BeikeShop حتى 1.5.5 FileManagerController.php rename new_name تجاوز الصلاحيات]
النقاط15

Interested in the pricing of exploits?

See the underground prices here!