| Titre | https://github.com/huanzi-qch/base-admin base-admin v1.0 Upload any file |
|---|
| Description | The base-admin system contains an arbitrary file upload vulnerability. The base-admin management system contains an arbitrary file upload vulnerability. Attackers can upload any file type. Although the target environment does not support JSP parsing, it can still upload HTML files, potentially leading to a stored XSS attack. |
|---|
| La source | ⚠️ https://github.com/huanzi-qch/base-admin/issues/38 |
|---|
| Utilisateur | Jszdk (UID 95030) |
|---|
| Soumission | 06/02/2026 07:13 (il y a 8 mois) |
|---|
| Modérer | 18/02/2026 09:57 (12 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 346462 [huanzi-qch base-admin JSP Parser SysFileController.java upload file élévation de privilèges] |
|---|
| Points | 18 |
|---|