| Titolo | SourceCodester Best employee management system 1.0 Unrestricted Upload |
|---|
| Descrizione | During the code audit process, it was discovered that the profile.php file in the Best Employee Management System does not properly filter uploaded files, allowing attackers to upload script files and perform Remote Code Execution (RCE). |
|---|
| Fonte | ⚠️ https://github.com/WuMing1e/CVE/issues/2 |
|---|
| Utente | mingle (UID 81052) |
|---|
| Sottomissione | 02/02/2025 08:59 (2 anni fa) |
|---|
| Moderazione | 07/02/2025 17:40 (5 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 284530 [SourceCodester Best Employee Management System 1.0 /admin/profile.php website_image escalationi di privilegi] |
|---|
| Punti | 0 |
|---|