| शीर्षक | zz_erp https://gitee.com/zj1983/zz <=2024-8 Any file upload |
|---|
| विवरण | The Z platform is an open source and free JAVA low-code development platform. Through dynamic configuration, various WEB management systems can be quickly developed. The Z platform is a single architecture model, suitable for the development of various enterprise-level management systems. Technical architecture (StringMVC + MyBatis + EasyUI + Bootstrap).
In its latest version of src/main/java/com/futvan/z/system/zfile/ZfileAction.upload interface, there is a vulnerability to upload any file, which does not require any conditions or permissions, can directly attack and can cross directories |
|---|
| स्रोत | ⚠️ https://www.yuque.com/u123456789-6sobi/cdgcbq/bg2g3eit41o4cpd4?singleDoc# 《ZZ_Arbitrary file upload vulnerability》 |
|---|
| उपयोगकर्ता | redpomelo (UID 79353) |
|---|
| सबमिशन | 20/02/2025 09:13 AM (2 साल पहले) |
|---|
| संयम | 01/03/2025 03:29 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 298091 [zj1983 zz तक 2024-8 ZfileAction.upload file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|