| Titolo | SourceCodester Pet Management System 1 Remote Code Execution |
|---|
| Descrizione | The Pet Grooming ERP application contains an Unrestricted File Upload vulnerability in the admin/profile.php module. An authenticated attacker can upload arbitrary files, including PHP code, instead of restricted image files. This results in Remote Code Execution (RCE) on the hosting server. |
|---|
| Fonte | ⚠️ https://github.com/drew-byte/Pet-Grooming-Management-RCE |
|---|
| Utente | drewbyte (UID 89075) |
|---|
| Sottomissione | 30/08/2025 15:29 (1 Anno fa) |
|---|
| Moderazione | 07/09/2025 18:28 (8 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 323036 [SourceCodester Pet Management System 1.0 /admin/profile.php website_image escalationi di privilegi] |
|---|
| Punti | 18 |
|---|