| शीर्षक | jkev Personnel Record Management System V1.0 Unrestricted Upload |
|---|
| विवरण | The employee information entry interface contains a critical, unrestricted file upload vulnerability. This flaw serves as the primary vector for a Remote Code Execution (RCE) attack. Attackers can bypass file type verification and authorization mechanisms to directly upload malicious WebShell scripts to the server. Once the WebShell is successfully uploaded, the attacker instantly gains server-level privileges, achieving full RCE. This allows the attacker to remotely execute arbitrary system commands, alter server configurations, steal core business data, implant ransomware or cryptominers, and potentially pivot laterally to compromise other servers within the internal network. |
|---|
| स्रोत | ⚠️ https://github.com/whatyourname12345/CVE/blob/main/PRMS/cve_Arbitrary%20File%20Upload%20to%20RCE.md |
|---|
| उपयोगकर्ता | chenkh (UID 96588) |
|---|
| सबमिशन | 20/03/2026 03:03 AM (7 महीनों पहले) |
|---|
| संयम | 04/04/2026 04:45 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 355346 [SourceCodester/jkev Record Management System 1.0 Add Employee Page save_emp.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|