| عنوان | https://gitee.com/technical-laohu/mpay mpay v1.2.4 Arbitrary file upload vulnerability |
|---|
| الوصف | There is an arbitrary file upload vulnerability in the QR code image upload function of mpay account management in the latest v1.2.4 version，Attackers can upload malicious files (such as webshells, viruses, and malicious scripts) to gain control of the server or steal sensitive information. |
|---|
| المصدر | ⚠️ https://github.com/bdkuzma/vuln/issues/17 |
|---|
| المستخدم | baihekuz (UID 84516) |
|---|
| ارسال | 10/01/2026 05:22 AM (9 أشهر منذ) |
|---|
| الاعتدال | 18/01/2026 02:59 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 341745 [technical-laohu mpay حتى 1.2.4 QR Code Image codeimg تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|