| Titolo | Prain 1.3.3 code injection |
|---|
| Descrizione | A vulnerability, which was classified as critical, has been found in Prain up to 1.3.3. Affected by this
issue is some unknown functionality of the file /?import of the component HTTP POST Request
Handler. The manipulation of the argument file leads to code injection. The attack may be launched
remotely |
|---|
| Fonte | ⚠️ https://github.com/zly-123/cve/blob/main/Prain%20code%20injection.pdf |
|---|
| Utente | qisui (UID 88945) |
|---|
| Sottomissione | 19/08/2025 10:48 (1 Anno fa) |
|---|
| Moderazione | 29/08/2025 10:07 (10 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 272072 [Prain fino a 1.3.0 HTTP POST Request /?import file escalationi di privilegi] |
|---|
| Punti | 0 |
|---|