| शीर्षक | Code-Projects 学生文件管理系统 V1.0 任意文件上传 |
|---|
| विवरण | An arbitrary file upload vulnerability was discovered in the "/student_profile.php" file of the "Student Profile Management System PHP". The cause of this issue is that after logging in with valid credentials, attackers can upload any file. The application failed to properly sanitize or validate during the upload verification process. This enables attackers to upload malicious files (such as WebShells), potentially leading to server compromise. |
|---|
| स्रोत | ⚠️ https://github.com/Bai-public/CVE/issues/3 |
|---|
| उपयोगकर्ता | Mountain Ghost (UID 92943) |
|---|
| सबमिशन | 21/12/2025 08:41 AM (10 महीनों पहले) |
|---|
| संयम | 23/12/2025 03:23 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 337857 [code-projects Student File Management System 1.0 /save_file.php file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|