| عنوان | BiggiDroid Simple PHP CMS 1.0 Unrestricted Upload |
|---|
| الوصف | BiggiDroid Simple PHP CMS, a lightweight content management system built with PHP, contains a critical arbitrary file upload vulnerability in its editsite.php script. This vulnerability allows unauthenticated or improperly authenticated attackers to upload malicious files (e.g., PHP webshells) to the server, leading to remote code execution (RCE), server compromise, and unauthorized access to sensitive data. |
|---|
| المصدر | ⚠️ https://gitee.com/hdert/ck/issues/IDGO28 |
|---|
| المستخدم | k271266 (UID 93965) |
|---|
| ارسال | 29/12/2025 05:03 PM (8 أشهر منذ) |
|---|
| الاعتدال | 09/01/2026 12:37 PM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 340273 [BiggiDroid Simple PHP CMS 1.0 /admin/editsite.php image تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|