إرسال #636624: https://github.com/yeqifu/carRental carRental 1.0 Memory Corruptionالمعلومات

عنوانhttps://github.com/yeqifu/carRental carRental 1.0 Memory Corruption
الوصفThe car/updateCar.action interface in version 1.0 of carRental has an arbitrary deletion vulnerability. Attackers can delete any files on the server by using the carimg parameter.
المصدر⚠️ https://github.com/JetpropelledSnake/CVE-File/blob/main/Unrestricted%20deletion%20of%20any%20file.md
المستخدم
 CoiledMag4 (UID 88961)
ارسال18/08/2025 04:18 AM (8 أشهر منذ)
الاعتدال29/08/2025 08:38 AM (11 days later)
الحالةتمت الموافقة
إدخال VulDB321858 [yeqifu carRental حتى 3fabb7eae93d209426638863980301d6f99866b3 AppFileUtils.java removeFileByPath carimg اجتياز الدليل]
النقاط15

Might our Artificial Intelligence support you?

Check our Alexa App!