| عنوان | code-projects Voting System 1.0 Unrestricted Upload |
|---|
| الوصف | During the security assessment of "Voting System", I detected a critical file upload vulnerability in the "/admin/candidates_add.php" file. This vulnerability stems from inadequate validation mechanisms for uploaded files, particularly the lack of proper file type verification, content checking, and extension filtering. Attackers can bypass existing restrictions to upload malicious files, potentially gaining unauthorized access to the server, executing arbitrary commands, and compromising the entire system. Immediate remediation is essential to ensure system security. |
|---|
| المصدر | ⚠️ https://github.com/underatted/CVE/issues/9 |
|---|
| المستخدم | underatted (UID 90321) |
|---|
| ارسال | 29/09/2025 05:38 PM (1 سنة منذ) |
|---|
| الاعتدال | 07/10/2025 09:01 AM (8 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 317588 [code-projects Voting System 1.0 candidates_add.php photo تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|