| عنوان | SourceCodester Real Estate Property Listing App Using PHP and MySQL with Source Code 1 Unrestricted Upload |
|---|
| الوصف | A vulnerability has been discovered in the SourceCodester Real Estate Property Listing App Using PHP and MySQL with Source Code. The affected feature is the file upload functionality in the `/admin/property.php` file. Attackers can upload arbitrary files using the `image` parameter, potentially gaining a shell . |
|---|
| المصدر | ⚠️ https://github.com/zzdzz7/cve/issues/2 |
|---|
| المستخدم | zzdzz (UID 93061) |
|---|
| ارسال | 28/11/2025 05:33 PM (10 أشهر منذ) |
|---|
| الاعتدال | 11/12/2025 10:14 AM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 335871 [SourceCodester Real Estate Property Listing App 1.0 /admin/property.php image تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|