| शीर्षक | codeastro Internet Banking System 1.0 Unrestricted Upload |
|---|
| विवरण | During the security audit of Internet Banking System, I found a serious file upload vulnerability. The vulnerability can upload employee pictures in the function of adding employees in the administrator background. If the uploaded files are not limited or the restrictions are bypassed, the function will be used to upload executable files and scripts to the server, which will further cause the server to be compromised. |
|---|
| स्रोत | ⚠️ https://github.com/lyg986443/cve/issues/9 |
|---|
| उपयोगकर्ता | bjbzbj (UID 83490) |
|---|
| सबमिशन | 15/04/2025 10:41 AM (1 वर्ष पहले) |
|---|
| संयम | 26/04/2025 11:13 AM (11 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 249509 [CodeAstro Internet Banking System तक 1.0 Profile Picture pages_account.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|