| Titolo | sourcecodester Web-based Pharmacy Product Management System using PHP and MySQL Database 1.0 RCE |
|---|
| Descrizione | The add-admin route has file uploads, which cause arbitrary file uploads due to improper detection, resulting in an RCE |
|---|
| Fonte | ⚠️ https://github.com/6s6-630/CVE/blob/main/yaofang.md |
|---|
| Utente | puppy_6s6 (UID 82933) |
|---|
| Sottomissione | 01/04/2025 17:09 (1 Anno fa) |
|---|
| Moderazione | 03/04/2025 21:06 (2 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 303271 [SourceCodester Web-based Pharmacy Product Management System 1.0 Create User Page /add-admin.php Avatar escalationi di privilegi] |
|---|
| Punti | 14 |
|---|