| शीर्षक | Student Study Center Desk Management System Arbitrary File Delete |
|---|
| विवरण | An Arbitrary File Delete Vulnerability has been discovered in Student Study Center Desk Management System.The vulnerable URI is /php-sscdms/classes/Master.php?f=delete_img and the vulnerable post parameter is 'path'.Successful exploitationcould allow remote attackers to delete any file on the target system, even system file.Unauthenticated attacker can also exploit this vulnerability for cookie is not necessary when performing this operation.
POST /php-sscdms/classes/Master.php?f=delete_img HTTP/1.1
********************************************
path=C%3A%2Ffoo.txt |
|---|
| स्रोत | ⚠️ https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code |
|---|
| उपयोगकर्ता | WWesleywww (UID 43117) |
|---|
| सबमिशन | 17/03/2023 10:12 AM (4 साल पहले) |
|---|
| संयम | 17/03/2023 12:44 PM (3 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 223326 [SourceCodester Student Study Center Desk Management System 1.0 POST Parameter Master.php?f=delete_img path निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|