| Título | SourceCodester Pet Management System 1 Remote Code Execution |
|---|
| Descripción | The Pet Grooming ERP application contains an Unrestricted File Upload vulnerability in the admin/profile.php module. An authenticated attacker can upload arbitrary files, including PHP code, instead of restricted image files. This results in Remote Code Execution (RCE) on the hosting server. |
|---|
| Fuente | ⚠️ https://github.com/drew-byte/Pet-Grooming-Management-RCE |
|---|
| Usuario | drewbyte (UID 89075) |
|---|
| Sumisión | 2025-08-30 15:29 (hace 1 Año) |
|---|
| Moderación | 2025-09-07 18:28 (8 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 323036 [SourceCodester Pet Management System 1.0 /admin/profile.php website_image escalada de privilegios] |
|---|
| Puntos | 18 |
|---|