जमा करें #562717: sparkshop <=v1.1.7 Code Injectionजानकारी

शीर्षकsparkshop <=v1.1.7 Code Injection
विवरणThe uploadFile in SparkShop system v1.1.7 allows for arbitrary file uploads, enabling arbitrary code execution
स्रोत⚠️ https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf
उपयोगकर्ता
 Qianyi (UID 71159)
सबमिशन20/04/2025 05:30 PM (1 वर्ष पहले)
संयम04/05/2025 08:56 AM (14 days later)
स्थितिप्रतिलिपि
VulDB प्रविष्टि271403 [Nanjing Xingyuantu Technology SparkShop तक 1.1.6 /api/Common/uploadFile file अधिकार वृद्धि]
अंक0

◂ पिछलासिंहावलोकनअगला ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!