Submit #385651: mainwww.com mwcms v1.0.0 FileUploadinfo

Titelmainwww.com mwcms v1.0.0 FileUpload
BeschreibungIn the app/controller/Upload.php page, the uploadfile() controller only filters files based on size and does not check the file contents or extensions. This allows attackers to upload PHP files.
Quelle⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE12-2.md
Benutzer
 Dee.Mirage (UID 71702)
Einreichung04.08.2024 16:44 (vor 2 Jahren)
Moderieren12.08.2024 18:07 (8 days later)
StatusAkzeptiert
VulDB Eintrag274184 [Fujian mwcms 1.0.0 /uploadfile.html uploadimage upfile erweiterte Rechte]
Punkte17

Do you know our Splunk app?

Download it now for free!