| शीर्षक | projectworlds Online Tours and Travels Project V1.0 Incomplete Identification of Uploaded File Variables |
|---|
| विवरण | During the security assessment of "Online Tours and Travels Project", I detected a critical file upload vulnerability in the "admin/change-image.php" file. This vulnerability is attributed to the insufficient validation of user-supplied files for the "submit" parameter. This inadequacy enables attackers to upload malicious files without proper restrictions. Consequently, attackers can achieve remote code execution, modify or delete files, and gain control over the system. Immediate corrective actions are essential to safeguard system security and uphold data integrity. |
|---|
| स्रोत | ⚠️ https://github.com/Landjun/CVE/issues/1 |
|---|
| उपयोगकर्ता | guanguanlaoshi (UID 90954) |
|---|
| सबमिशन | 25/09/2025 08:14 AM (1 वर्ष पहले) |
|---|
| संयम | 27/09/2025 07:16 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 326184 [Projectworlds Online Tours and Travels 1.0 /admin/change-image.php packageimage अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|