| Titel | PHPGurukul Tourism Management System V1.0 Unrestricted Upload |
|---|
| Beschreibung | The package creation feature contains a critical file upload vulnerability that allows authenticated attackers to upload malicious PHP files due to complete lack of validation. This can lead to complete system compromise through remote code execution. |
|---|
| Quelle | ⚠️ https://github.com/ltranquility/CVE/issues/4 |
|---|
| Benutzer | Customer (UID 83474) |
|---|
| Einreichung | 14.06.2025 11:10 (vor 10 Monaten) |
|---|
| Moderieren | 19.06.2025 12:32 (5 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 260918 [PHPGurukul Tourism Management System 2.0 create-package.php erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|