| Titolo | VIP-video-analysis system exists in SSRF vulnerability unauthorized in data/title.php |
|---|
| Descrizione | The reason for the formation of SSRF is mostly due to the server providing the function of obtaining data from other server applications without filtering and restricting the target address. For example, obtaining web page text content from a specified URL address, loading images from the specified address, downloading, and so on. The system has an SSRF vulnerability in data/title.php |
|---|
| Fonte | ⚠️ https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/VIP-video-analysis/SSRF.md |
|---|
| Utente | webray.com.cn (UID 24778) |
|---|
| Sottomissione | 31/05/2023 11:59 (3 anni fa) |
|---|
| Moderazione | 31/05/2023 15:04 (3 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 230359 [yiwent Vip Video Analysis 1.0 data/title.php titurl escalationi di privilegi] |
|---|
| Punti | 19 |
|---|