| Titel | itsourcecode Farm Management System 1.0 Code Injection |
|---|
| Beschreibung | In the add-pig.php file of the "Farm Management System In PHP" project, attackers can upload malicious code files through the parameter $res1_name. Due to the lack of proper validation and sanitation of the uploaded files, attackers are able to directly upload malicious files to the server, leading to the risk of arbitrary code execution. |
|---|
| Quelle | ⚠️ https://github.com/yunhai666/cve/issues/2 |
|---|
| Benutzer | weiwei-abc (UID 80329) |
|---|
| Einreichung | 18.01.2025 12:15 (vor 1 Jahr) |
|---|
| Moderieren | 19.01.2025 21:00 (1 day later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 292600 [itsourcecode Farm Management System bis 1.0 /add-pig.php pigphoto erweiterte Rechte] |
|---|
| Punkte | 19 |
|---|