| عنوان | College-Notes-Gallery v1.0.0 Unrestricted Upload |
|---|
| الوصف | anirbandutta9/College-Notes-Gallery has a Random file upload getshell vulnerability. During the security review of "College-Notes-Gallery", I found an arbitrary file upload vulnerability in the "dashboard\userprofile.php" file. This vulnerability is caused by the user's lack of strict filtering when uploading pictures. The attacker can modify the Content-Type and bypass the security detection, resulting in arbitrary file upload vulnerabilities and upload webshell. Attackers can deploy backdoors, WebShell and other malicious programs on the server, so as to achieve remote code execution and server control, further steal sensitive data or disrupt the normal operation of the business system. |
|---|
| المصدر | ⚠️ https://github.com/yingxiujie/cve/issues/10 |
|---|
| المستخدم | yingxiujie (UID 96521) |
|---|
| ارسال | 20/07/2026 10:39 AM (2 أشهر منذ) |
|---|
| الاعتدال | 22/09/2026 06:11 PM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 408520 [anirbandutta9 College-Notes-Gallery حتى 8c1cf3d98f30982d069c88ca172612c001eb39f6 userprofile.php?section=admin1 image تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|