जमा करें #753240: https://github.com/huanzi-qch/base-admin base-admin v1.0 Upload any fileजानकारी

शीर्षकhttps://github.com/huanzi-qch/base-admin base-admin v1.0 Upload any file
विवरणThe base-admin system contains an arbitrary file upload vulnerability. The base-admin management system contains an arbitrary file upload vulnerability. Attackers can upload any file type. Although the target environment does not support JSP parsing, it can still upload HTML files, potentially leading to a stored XSS attack.
स्रोत⚠️ https://github.com/huanzi-qch/base-admin/issues/38
उपयोगकर्ता
 Jszdk (UID 95030)
सबमिशन06/02/2026 07:13 AM (8 महीनों पहले)
संयम18/02/2026 09:57 AM (12 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि346462 [huanzi-qch base-admin तक 57a8126bb3353a004f3c7722089e3b926ea83596 JSP Parser SysFileController.java upload file अधिकार वृद्धि]
अंक18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!