Soumettre #637297: Prain 1.3.3 code injection

A vulnerability, which was classified as critical, has been found in Prain up to 1.3.3. Affected by this
issue is some unknown functionality of the file /?import of the component HTTP POST Request
Handler. The manipulation of the argument file leads to code injection. The attack may be launched
remotely

• La source: ⚠️ https://github.com/zly-123/cve/blob/main/Prain%20code%20injection.pdf
• Utilisateur: qisui (UID 88945)
• Soumission: 19/08/2025 10:48 (il y a 1 Année)
• Modérer: 29/08/2025 10:07 (10 days later)
• Statut: Dupliqué
• Entrée VulDB: 272072 [Prain jusqu’à 1.3.0 HTTP POST Request /?import file élévation de privilèges]
• Points: 0