Submit #748850: projectworlds Online Notes Sharing Platform PHP V1.0 Unrestricted Uploadinfo

Titelprojectworlds Online Notes Sharing Platform PHP V1.0 Unrestricted Upload
BeschreibungThe `userprofile.php` file in the target application (path: `/dashboard/userprofile.php`) contains a critical unrestricted file upload vulnerability combined with a web server file parsing flaw, which allows remote attackers to execute arbitrary system commands (RCE) on the target server.
Quelle⚠️ https://github.com/hater-us/CVE/issues/5
Benutzer
 Hater (UID 94862)
Einreichung29.01.2026 14:26 (vor 8 Monaten)
Moderieren07.02.2026 11:33 (9 days later)
StatusDuplikat
VulDB Eintrag331509 [projectworlds Online Notes Sharing Platform 1.0 userprofile.php image erweiterte Rechte]
Punkte0

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!