| Titre | code-projects Faculty Management System 1.0 Path Traversal: '.../...//' |
|---|
| Description | During the security review of "Faculty Management System", discovered a critical Unauthorized Path Traversal vulnerability in the "examples.php" file. This vulnerability stems from insufficient user input validation of the 'src' parameter, allowing attackers to inject malicious path file. Therefore, attackers can gain unauthorized access to Operation System File system, access sensitive information. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| La source | ⚠️ https://github.com/xiaoliyu-1/Faculty-Management-System-examples.php-v.1.0-Path-Traversal/blob/main/report.md |
|---|
| Utilisateur | xiaoliyu (UID 90318) |
|---|
| Soumission | 18/09/2025 09:05 (il y a 10 mois) |
|---|
| Modérer | 26/09/2025 10:39 (8 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 325970 [DataTables jusqu’à 1.10.13 examples.php src directory traversal] |
|---|
| Points | 20 |
|---|