| शीर्षक | campcodes Church Management System ≤1.0 Arbitrary file upload |
|---|
| विवरण | Arbitrary file upload vulnerability exists in image parameter of /admin/admin_pic.php file of Church Management System
Arbitrary file upload poses significant cybersecurity risks. Attackers can upload files containing malicious code to execute on the server, gaining system privileges and stealing sensitive data. They may also overwrite or delete legitimate files, disrupt system functionality, and abuse server resources. By bypassing authentication mechanisms, attackers can gain access to restricted resources, escalate privileges, and compromise the server.
Payload: image=<?php phpinfo(); ?> |
|---|
| स्रोत | ⚠️ https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%2010.pdf |
|---|
| उपयोगकर्ता | SSL_Seven_Security Lab_WangZhiQiang_XiaoZiLong (UID 38936) |
|---|
| सबमिशन | 08/04/2024 05:30 PM (2 साल पहले) |
|---|
| संयम | 09/04/2024 06:45 PM (1 day later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 210565 [Church Management System 1.0 /admin/admin_pic.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|