| عنوان | ashymuzuro/Full-Ecommece-Website web 1 File Upload Vulnerability |
|---|
| الوصف | There is a file upload vulnerability in this project. After downloading the project and successfully deploying it locally, use the existing account and password in the database to log in to the administrator backend. Find the file upload interface in the administrator backend and upload a PHP Trojan file. Since the project does not perform type verification or size limitation on uploaded files, any file can be uploaded directly, thus causing a file upload vulnerability. Through the file upload vulnerability, a successful connection to the server host can be established. |
|---|
| المصدر | ⚠️ https://github.com/Lianhaorui/Report/blob/main/FileUpload-1.docx |
|---|
| المستخدم | lianhaorui (UID 91045) |
|---|
| ارسال | 15/10/2025 04:16 AM (10 أشهر منذ) |
|---|
| الاعتدال | 26/10/2025 05:40 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 329959 [ashymuzuro Full-Ecommece-Website/Muzuro Ecommerce System حتى 1.1.0 Add Product Page index.php?add_product تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|