| शीर्षक | CodeAstro HMS Hospital Management System 1.0 Arbitrary Authenticated File Upload Leading to RCE |
|---|
| विवरण | The file upload functionality at the endpoint /his_doc_update-account.php in the HMS (Hospital Management System) application allows users to upload files without proper validation. An attacker can exploit this vulnerability to upload a malicious PHP file, potentially enabling remote code execution (RCE) on the server. |
|---|
| स्रोत | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/codeastro_hms_rce.md |
|---|
| उपयोगकर्ता | egsec (UID 77043) |
|---|
| सबमिशन | 20/11/2024 12:20 PM (2 साल पहले) |
|---|
| संयम | 25/11/2024 03:39 PM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 286014 [CodeAstro Hospital Management System 1.0 his_doc_update-account.php doc_dpic अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|