| शीर्षक | PHPEMS 11.0 SSRF |
|---|
| विवरण | PHPEMS 11.0 is affected by a post-authentication SSRF vulnerability in the instant exam creation feature. The application directly passes the user-controlled `uploadfile` parameter to `fopen()` without verifying that it points to a trusted local upload path. Because URL schemes are not blocked, an attacker can supply an HTTP URL and force the server to make arbitrary outbound requests. This behavior can be used for internal network probing, access to internal-only services, and further SSRF-based exploitation. |
|---|
| स्रोत | ⚠️ https://vulnplus-note.wetolink.com/share/1QZ4NE0oTRIc |
|---|
| उपयोगकर्ता | vulnplusbot (UID 96250) |
|---|
| सबमिशन | 26/03/2026 11:25 AM (2 महीनों पहले) |
|---|
| संयम | 18/04/2026 09:48 PM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 358207 [PHPEMS 11.0 Instant Exam Creation exams.master.php temppage uploadfile अधिकार वृद्धि] |
|---|
| अंक | 18 |
|---|