| عنوان | Code-projects ONLINE MUSIC SITE v1.0 Arbitrary file upload vulnerability |
|---|
| الوصف | A Arbitrary file upload vulnerability vulnerability was identified within the " AdminUpdateAlbum.php" file of the "ONLINE MUSIC SITE" project. The root cause is that attackers can bypass file type detection via "Content-Type" and "Content-Disposition". Then upload malicious Trojan files. As a result, attackers can upload malicious scripts and execute them to directly control servers, steal data, or launch subsequent attacks that seriously threaten system security. In order to safeguard system security and maintain data integrity and confidentiality, corrective action must be taken immediately. |
|---|
| المصدر | ⚠️ https://github.com/gtxy114514/CVE/issues/4 |
|---|
| المستخدم | the_better_you (UID 94054) |
|---|
| ارسال | 11/04/2026 01:24 PM (2 أشهر منذ) |
|---|
| الاعتدال | 27/04/2026 07:19 PM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 359846 [code-projects Online Music Site 1.0 AdminUpdateAlbum.php txtimage تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|