إرسال #640955: github.com Remote Clinic System V2.0 File unrestricted uploadالمعلومات

عنوانgithub.com Remote Clinic System V2.0 File unrestricted upload
الوصفDuring the security review of "Remote Clinic System", I discovered a critical file unrestricted upload vulnerability in the "/staff/edit-my-profile.php " file. This vulnerability arises from inadequate validation and restrictions on the parameter when handling file uploads, enabling attackers to upload arbitrary files. As a result, attackers can execute malicious code on the server, gain unauthorized access to the system, and compromise data security. Immediate remedial measures are required to ensure system security and protect data integrity.
المصدر⚠️ https://github.com/diy777/cve/issues/2
المستخدم
 diy777 (UID 89447)
ارسال25/08/2025 03:12 AM (10 أشهر منذ)
الاعتدال31/08/2025 10:02 PM (7 days later)
الحالةتمت الموافقة
إدخال VulDB322075 [RemoteClinic حتى 2.0 edit-my-profile.php image تجاوز الصلاحيات]
النقاط20

Want to stay up to date on a daily basis?

Enable the mail alert feature now!