Soumettre #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writesinformation

Titrehttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
DescriptionA vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
La source⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
Utilisateur
 J1rrY (UID 64327)
Soumission16/07/2024 10:25 (il y a 2 ans)
Modérer20/07/2024 12:21 (4 days later)
StatutAccepté
Entrée VulDB272072 [Prain jusqu’à 1.3.0 HTTP POST Request /?import file élévation de privilèges]
Points16

Do you want to use VulDB in your project?

Use the official API to access entries easily!