| शीर्षक | newbee-mall V1.0 Unrestricted Upload |
|---|
| विवरण | There are arbitrary file uploads in the ltd/newbee/all/controller/common/uploadController. java file of the software newbee all. The code does not restrict the file upload suffix. Although the backend will verify whether it is an image, it can be bypassed by concatenating the content to be parsed after the binary data of the uploaded image, thus enabling arbitrary file upload. Although the uploaded file name becomes random, it will still return the uploaded file name, so it can be utilized. |
|---|
| स्रोत | ⚠️ https://github.com/yaklang/IRifyScanResult/blob/main/newbee-mall/arbitrary-file-upload-in-uploadController.md |
|---|
| उपयोगकर्ता | 1098024193 (UID 45260) |
|---|
| सबमिशन | 21/04/2025 05:51 AM (1 वर्ष पहले) |
|---|
| संयम | 04/05/2025 09:05 AM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 307363 [newbee-mall 1.0 UploadController.java upload file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|