| शीर्षक | projectworlds Advanced Library Management System 1 Unrestricted Upload |
|---|
| विवरण | The Advanced Library Management System (V1.0) suffers from an unrestricted file upload vulnerability in edit_book.php. Authenticated users with edit privileges can upload arbitrary files, including PHP scripts, which are stored under the publicly accessible /upload/ directory. Since these files can be directly accessed via HTTP, an attacker can achieve remote code execution (RCE) by uploading and executing malicious PHP code. This flaw exposes the server to full compromise, data exfiltration, and service disruption, making the issue critical in severity. |
|---|
| स्रोत | ⚠️ https://github.com/ChenGuangHuangHun/CVE/issues/3 |
|---|
| उपयोगकर्ता | chenguang (UID 91178) |
|---|
| सबमिशन | 01/10/2025 09:05 AM (1 वर्ष पहले) |
|---|
| संयम | 07/10/2025 01:44 PM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 327361 [projectworlds Advanced Library Management System 1.0 /edit_book.php image अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|