| عنوان | CodeAstro Online Job Portal V1.0 arbitrary file upload |
|---|
| الوصف | During the security review of "Online Job Portal Project",I discovered a critical arbitrary file upload vulnerability in the "users/update-profile.php" file. This vulnerability stems from insufficient user input validation of uploaded images, allowing attackers to upload malicious scripts. Therefore, attackers can execurte arbitrary commands, steal data, or compromise complete system. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| المصدر | ⚠️ https://github.com/Witiers/CVEs/issues/3 |
|---|
| المستخدم | Witiers (UID 99561) |
|---|
| ارسال | 06/07/2026 09:24 AM (2 أشهر منذ) |
|---|
| الاعتدال | 21/08/2026 07:26 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 394032 [CodeAstro Online Job Portal 1.0 update-profile.php الأسم تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|