| Titolo | code-projects Online Bike Rental System v1.0 Incomplete Identification of Uploaded File Variables |
|---|
| Descrizione | All files in changeimage *. php have incomplete identification of upload file variables. Hackers can directly upload files with any extension. If the content of the file contains malicious content, it may result in the loss of server permissions. |
|---|
| Fonte | ⚠️ https://github.com/Huandtx/cve/blob/main/cve/Online%20Bike%20Rental%20System/File_upload1.md |
|---|
| Utente | huandtx (UID 79079) |
|---|
| Sottomissione | 06/01/2025 13:04 (2 anni fa) |
|---|
| Moderazione | 08/01/2025 18:16 (2 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 290822 [code-projects Online Bike Rental System 1.0 Change Image escalationi di privilegi] |
|---|
| Punti | 16 |
|---|