| Titolo | Sourcecodester Mobile Management Store 1.0 RCE via Arbitrary File Upload |
|---|
| Descrizione | The upload avatar functionality in the admin page is vulnerable to Arbitrary File Upload that lead to Remote Code Execution. This allow the attacker to execute OS Commands using malicious PHP script. |
|---|
| Fonte | ⚠️ https://github.com/vanitashtml/CVE-Dumps/blob/main/RCE%20via%20Arbitrary%20File%20Upload%20in%20Mobile%20Management%20Store.md |
|---|
| Utente | rjavenido22 (UID 64261) |
|---|
| Sottomissione | 01/03/2024 14:04 (2 anni fa) |
|---|
| Moderazione | 02/03/2024 23:15 (1 day later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 255501 [SourceCodester Online Mobile Management Store 1.0 /classes/Users.php img escalationi di privilegi] |
|---|
| Punti | 16 |
|---|