| Titel | Prain 1.3.3 code injection |
|---|
| Beschreibung | A vulnerability, which was classified as critical, has been found in Prain up to 1.3.3. Affected by this
issue is some unknown functionality of the file /?import of the component HTTP POST Request
Handler. The manipulation of the argument file leads to code injection. The attack may be launched
remotely |
|---|
| Quelle | ⚠️ https://github.com/zly-123/cve/blob/main/Prain%20code%20injection.pdf |
|---|
| Benutzer | qisui (UID 88945) |
|---|
| Einreichung | 19.08.2025 10:48 (vor 1 Jahr) |
|---|
| Moderieren | 29.08.2025 10:07 (10 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 272072 [Prain bis 1.3.0 HTTP POST Request /?import file erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|