| शीर्षक | DedeBIZ DedeBIZ <=6.2.12 file upload |
|---|
| विवरण | When logging into the backend as an administrator, we can upload files in the attachment management section. Here, we can upload files, and the backend likely detects whether the uploaded file is an image based on its file signature. However, this means we can upload arbitrary PHP files, potentially leading to command execution. |
|---|
| स्रोत | ⚠️ https://github.com/JTZ-a/SRC/blob/master/DedeBIZ/DedeBIZ%20-%20file%20upload/README.md |
|---|
| उपयोगकर्ता | JTZ- (UID 59232) |
|---|
| सबमिशन | 20/12/2023 06:25 AM (3 साल पहले) |
|---|
| संयम | 29/12/2023 11:20 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 249368 [Muyun DedeBIZ तक 6.2.12 Add Attachment अधिकार वृद्धि] |
|---|
| अंक | 18 |
|---|