| عنوان | code-projects Online Lot Reservation System 1.0 File Disclosure / LFI |
|---|
| الوصف | An arbitrary file reading vulnerability was found in the download.php file. The vulnerability stems from the fact that the file parameter input by the user is not filtered or validated and is directly passed to the readfile() function. Attackers can read any file on the server through path traversal or absolute paths, including system configurations, sensitive data, and files of other applications. |
|---|
| المصدر | ⚠️ https://github.com/zzk6th/cve/issues/2 |
|---|
| المستخدم | z0ng (UID 96775) |
|---|
| ارسال | 09/04/2026 01:55 PM (5 أشهر منذ) |
|---|
| الاعتدال | 26/04/2026 09:21 PM (17 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 359731 [code-projects Online Lot Reservation System حتى 1.0 /download.php readfile ملف اجتياز الدليل] |
|---|
| النقاط | 20 |
|---|