| शीर्षक | JPShop JPShop <=1.5.02 Arbitrary File Upload |
|---|
| विवरण | The JPShop application, specifically its version up to 1.5.02, contains an Arbitrary File Upload vulnerability within the ComboController.php file located in the /api/controllers/admin/app/ directory. This vulnerability arises due to the application's failure to properly validate user-supplied input for the pic_url parameter, which is processed by the actionIndex function. An attacker can exploit this flaw by encoding malicious content and sending a specially crafted PUT request to upload arbitrary files, including potentially executable scripts, to the server. Once uploaded, the attacker can then use another endpoint to retrieve the filename and subsequently access or execute the file on the server, leading to a potential compromise of the system. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/H73DuWdyifaI |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 04/02/2024 09:47 AM (3 साल पहले) |
|---|
| संयम | 06/02/2024 09:29 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 252999 [Juanpao JPShop तक 1.5.02 API ComboController.php actionIndex pic_url अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|