| Titolo | Sourcecodester Best pos management system in php V1.0 Remote File Inclusion |
|---|
| Descrizione | A serious vulnerability was discovered in Best pos management system in php, which exists in the page parameter in the index.php file at the root path. This parameter can be directly passed in using the GET method, and the server immediately executes the following code after receiving the page parameter<?php include $page . 'php'?> |
|---|
| Fonte | ⚠️ https://github.com/wkeyi0x1/vul-report/blob/main/Best%20pos%20management%20system%20in%20php/report.md |
|---|
| Utente | wkeyi0x1 (UID 64789) |
|---|
| Sottomissione | 03/03/2024 12:05 (2 anni fa) |
|---|
| Moderazione | 03/03/2024 17:05 (5 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 255587 [SourceCodester Best POS Management System 1.0 index.php page escalationi di privilegi] |
|---|
| Punti | 19 |
|---|