| عنوان | Sourcecodester Online Student Clearance System 1.0 Unrestricted Upload |
|---|
| الوصف | User can update file through /edit-photo.php. Users must authenticate with valid credentials to access the system. A vulnerability exists in the profile picture upload functionality where inadequate filtering of malicious file extensions allows attackers to upload webshell files, leading to RCE. |
|---|
| المصدر | ⚠️ https://github.com/Xiaoyi-ing/CVE/issues/1 |
|---|
| المستخدم | me1ody (UID 84857) |
|---|
| ارسال | 01/05/2025 11:24 AM (1 سنة منذ) |
|---|
| الاعتدال | 15/05/2025 08:53 AM (14 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 308087 [SourceCodester Online Student Clearance System 1.0 /edit-photo.php userImage تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|