| शीर्षक | CodeAstro Hospital Management System 1.0 RCE via Arbitrary File Upload |
|---|
| विवरण | Vendor and Product Information:
Vendor: CodeAstro
Product: Hospital Management System
Product URL: https://codeastro.com/hospital-management-system-in-php-with-source-code-adv/
Confidence: Confirmed
Description:
The profile page in the application contains a critical vulnerability. The function responsible for uploading profile pictures allows attackers to upload arbitrary files, including malicious PHP scripts. This dangerous flaw enables attackers to execute arbitrary code on the server. By exploiting this vulnerability, attackers could potentially gain unauthorized access to sensitive data, disrupt system operations, or even take complete control of the server. This poses a significant security risk and requires immediate attention to mitigate. |
|---|
| स्रोत | ⚠️ https://github.com/shaturo1337/POCs/blob/main/Remote%20Code%20Execution%20via%20Arbitrary%20File%20Upload%20in%20Hospital%20Management%20System.md |
|---|
| उपयोगकर्ता | John Correche (UID 79510) |
|---|
| सबमिशन | 30/12/2024 01:47 PM (2 साल पहले) |
|---|
| संयम | 31/12/2024 09:44 AM (20 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 286014 [CodeAstro Hospital Management System 1.0 his_doc_update-account.php doc_dpic अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|