| शीर्षक | CodeAstro Real Estate Management System 1.0 Arbitrary Authenticated File Upload Leading to RCE |
|---|
| विवरण | The vulnerability arises from the lack of proper file validation and authentication checks in the file upload mechanism of the application. Both /aboutadd.php and /aboutedit.php endpoints allow authenticated admin to upload image files intended for the "About Page". However, the system does not properly validate the content type or check for the file's executable nature. As a result, an attacker could upload a malicious file (such as a PHP reverse shell) disguised as a legitimate image. Once the file is uploaded, the server processes it without detecting its harmful nature. This allows attackers to execute arbitrary code on the server, potentially leading to remote code execution (RCE). |
|---|
| स्रोत | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/codeastro_real_estate_ms_authenticated_rce.md |
|---|
| उपयोगकर्ता | egsec (UID 77043) |
|---|
| सबमिशन | 06/11/2024 08:59 PM (2 साल पहले) |
|---|
| संयम | 07/11/2024 09:47 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 283465 [CodeAstro Real Estate Management System 1.0 About Us Page /aboutedit.php aimage अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|