| عنوان | Campcodes Recruitment Management System v1.0 Improper Control of Filename for Include/Require Statement in PH |
|---|
| الوصف | A file inclusion vulnerability was discovered in the '/admin/index.php' file of the Recruitment Management System 1.0 project. The root cause is that the application directly uses the user-controllable parameter "page" to construct file paths and passes them to the include() file inclusion function. There is no strict validation, filtering, or whitelisting of the input content for this parameter, nor is there any control over the scope of included files. |
|---|
| المصدر | ⚠️ https://github.com/chenjunjie3/cve/issues/7 |
|---|
| المستخدم | chenjunjie (UID 88914) |
|---|
| ارسال | 27/08/2025 10:17 AM (1 سنة منذ) |
|---|
| الاعتدال | 03/09/2025 01:09 PM (7 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 322321 [Campcodes Recruitment Management System 1.0 /admin/index.php include page تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|