| शीर्षक | Shopex ECShop v2.5.1 Unrestricted Upload |
|---|
| विवरण | 1. Product Overview
ECShop is an open-source B2C independent online store system developed by ShopEx Software Co., Ltd. Launched in 2006, it has served over one million enterprises and focuses on rapid deployment of personalized online stores.
- Official Website: https://www.ecshop.com/
- Download Address: https://down.chinaz.com/soft/20737.htm
- Affected Version: v2.5.1
Vulnerability Root Cause
The check_img_type() function only validates the client-controlled Content-Type request header. This header can be arbitrarily forged by attackers, enabling easy bypass of file type restrictions. |
|---|
| स्रोत | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/TNENwNItlitygtk2uABcj02lndc?from=from_copylink |
|---|
| उपयोगकर्ता | hubdk01 (UID 99481) |
|---|
| सबमिशन | 03/07/2026 07:32 PM (2 महीनों पहले) |
|---|
| संयम | 31/08/2026 01:34 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397301 [ShopEx ECShop तक 2.5.1 admin/pack.php check_img_type pack_img अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|