| शीर्षक | SourceCodester Prison Management System Using PHP V1.0 Unrestricted Upload |
|---|
| विवरण | The input obtained through PHP on line 28 of the Admin\add admin. php file is used by php on line 28 of the Admin\add admin. php file to determine the location of the file to be written, which may allow attackers to modify or damage the content of the file, or create a brand new file.
zebra11 found that the file upload operation was triggered in \Admin\add admin.php, and the _FAILE variable was used to receive the payload. After receiving the attack vector from a remote attacker, it will result in unrestricted uploads, and remote attacks may lead to RCE. |
|---|
| स्रोत | ⚠️ https://github.com/CveSecLook/cve/issues/31 |
|---|
| उपयोगकर्ता | zebra11 (UID 68838) |
|---|
| सबमिशन | 14/05/2024 07:27 PM (2 साल पहले) |
|---|
| संयम | 15/05/2024 09:22 PM (1 day later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 259631 [SourceCodester Prison Management System 1.0 Avatar /Admin/add-admin.php avatar अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|