Enviar #393375: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUploadinformación

TítuloChengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUpload
DescripciónIn the FileManagerController.php controller, the rename method can modify the name of the file, but due to improper filtering, attackers can directly modify the file suffix to php file.
Fuente⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE4-2.md
Usuario
 wanglun (UID 73616)
Sumisión2024-08-18 09:59 (hace 2 años)
Moderación2024-08-26 09:22 (8 days later)
EstadoAceptado
Entrada de VulDB275762 [Chengdu Everbrite Network Technology BeikeShop hasta 1.5.5 FileManagerController.php rename new_name escalada de privilegios]
Puntos15

Interested in the pricing of exploits?

See the underground prices here!