Invia #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writesinformazioni

Titolohttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
DescrizioneA vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
Fonte⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
Utente
 J1rrY (UID 64327)
Sottomissione16/07/2024 10:25 (2 anni fa)
Moderazione20/07/2024 12:21 (4 days later)
StatoAccettato
Voce VulDB272072 [Prain fino a 1.3.0 HTTP POST Request /?import File escalationi di privilegi]
Punti16

Do you want to use VulDB in your project?

Use the official API to access entries easily!