| शीर्षक | SOURCECODESTER File Manager App 1.0 Arbitrary File Upload |
|---|
| विवरण | The File Manager App has an Arbitrary File Upload vulnerability in `/endpoint/update-file.php`, allowing attackers to upload files of any type, including PHP scripts. This flaw can lead to executing arbitrary server-side code. The issue arises from insufficient validation of uploaded file types, enabling the upload of potentially malicious files under the guise of legitimate ones. This vulnerability highlights the critical need for strict file validation mechanisms, including checking MIME types and file extensions, to prevent unauthorized file uploads and protect the system from possible exploits. |
|---|
| स्रोत | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/SOURCECODESTER%20File%20Manager%20App/Arbitrary%20File%20Upload%20-%20update-file.php.md |
|---|
| उपयोगकर्ता | nochizplz (UID 64302) |
|---|
| सबमिशन | 17/03/2024 12:47 PM (3 साल पहले) |
|---|
| संयम | 18/03/2024 05:07 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 257182 [SourceCodester File Manager App 1.0 update-file.php Arquivo अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|