| Titel | SourceCodester Pet Management System 1 Remote Code Execution |
|---|
| Beschreibung | The Pet Grooming ERP application contains an Unrestricted File Upload vulnerability in the admin/profile.php module. An authenticated attacker can upload arbitrary files, including PHP code, instead of restricted image files. This results in Remote Code Execution (RCE) on the hosting server. |
|---|
| Quelle | ⚠️ https://github.com/drew-byte/Pet-Grooming-Management-RCE |
|---|
| Benutzer | drewbyte (UID 89075) |
|---|
| Einreichung | 30.08.2025 15:29 (vor 1 Jahr) |
|---|
| Moderieren | 07.09.2025 18:28 (8 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 323036 [SourceCodester Pet Management System 1.0 /admin/profile.php website_image erweiterte Rechte] |
|---|
| Punkte | 18 |
|---|