إرسال #556135: https://gitee.com/panhainan/DS-Java DS-Java 1.0 Code Injection via File Uploadالمعلومات

عنوانhttps://gitee.com/panhainan/DS-Java DS-Java 1.0 Code Injection via File Upload
الوصفThe uploadUserPic.action interface of DS-Java 1.0 version is vulnerable to arbitrary file upload. An attacker can execute JSP code by uploading malicious.jsp files.
المصدر⚠️ https://github.com/caigo8/CVE-md/blob/main/DS-Java/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.md
المستخدم
 Caigo (UID 81287)
ارسال10/04/2025 08:42 PM (1 سنة منذ)
الاعتدال21/04/2025 03:12 PM (11 days later)
الحالةتمت الموافقة
إدخال VulDB305771 [panhainan DS-Java 1.0 FileUpload.java uploadUserPic.action fileUpload تجاوز الصلاحيات]
النقاط15

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!