إرسال #566596: kkFileView 4.4.0 Arbitrary File Writingالمعلومات

عنوانkkFileView 4.4.0 Arbitrary File Writing
الوصفUser can upload a compressed file which includes arbitrary kind of file types, when they preview the compressed file, it will be decompressed automatically without any check, so some dangerous file like .jsp .exe, etc. will be saved in the server.
المصدر⚠️ https://magnificent-dill-351.notion.site/Arbitrary-File-Upload-in-kkFileView-4-4-0-1e3c693918ed802581faccab9140a130
المستخدم
 s0l42 (UID 82389)
ارسال28/04/2025 11:58 AM (1 سنة منذ)
الاعتدال10/05/2025 02:58 PM (12 days later)
الحالةتمت الموافقة
إدخال VulDB308283 [kkFileView 4.4.0 /fileUpload ملف تجاوز الصلاحيات]
النقاط13

Do you want to use VulDB in your project?

Use the official API to access entries easily!