| शीर्षक | File upload vulnerability exists in background article publishing |
|---|
| विवरण | A vulnerability has been discovered in php-basic-cms that is classified as serious. If the uploaded files are not strictly verified and filtered, malicious script files may be uploaded to take over the entire website or even the server.
There is an add article screen in /admin background. The file type is not verified when the image file is uploaded. Construct the webshel file 1.php. After uploading, the path of webshell is /img/1.php
By connecting to webshell, you can control the entire server |
|---|
| स्रोत | ⚠️ https://github.com/goodric/php-basic/blob/main/README.md |
|---|
| उपयोगकर्ता | goodric (UID 43258) |
|---|
| सबमिशन | 26/03/2023 03:39 PM (4 साल पहले) |
|---|
| संयम | 27/03/2023 10:57 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 224105 [php-basic-cms /admin अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|