| عنوان | Vulnerabilities in the dating platform. windows 4.0 File upload vulnerability |
|---|
| الوصف | Code auditing reveals that the following code receives the data parameter through the input function. The type of the data parameter is an array, and then it calls the base64image function for processing.
$res = base64Image($v,"uploads/".date("Y-m-d")."/");
if (preg_match('/^(data:\s*image\/(\w+);base64,)/',$imgBase64,$res))
if (file_put_contents($new_file,base64_decode(str_replace($res[1],'', $imgBase64))))
After encoding the verification code with Base64, upload it.
https://www.jianshu.com/p/f8ca5e3cd889 |
|---|
| المصدر | ⚠️ https://www.jianshu.com/p/f8ca5e3cd889 |
|---|
| المستخدم | leizi (UID 82832) |
|---|
| ارسال | 16/03/2025 07:46 AM (2 سنوات منذ) |
|---|
| الاعتدال | 22/03/2025 02:45 PM (6 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 300688 [Yue Lao Blind Box 月老盲盒 حتى 4.0 Upload.php base64image data تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|