| タイトル | Engineers Online Portal System upload_save_student.php has a file upload (RCE) vulnerability |
|---|
| 説明 | Engineers Online Portal System has a file upload (RCE) vulnerability, vulnerability exists in upload_save_student.php file, Can upload any format of the file, and there is no limit, the file name is simply encrypted, but can be enumerated to guess, developers should limit the type of user upload file, otherwise it will lead to the user to obtain server permissions, steal sensitive data, serious or even lead to server crash, a large number of user privacy disclosure.
Source DownLoad:https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html |
|---|
| ソース | ⚠️ https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20upload_save_student.php%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf |
|---|
| ユーザー | llixixioo (UID 54584) |
|---|
| 送信 | 2023年09月23日 15:24 (3 年 ago) |
|---|
| モデレーション | 2023年09月29日 11:50 (6 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 240912 [SourceCodester Engineers Online Portal 1.0 upload_save_student.php uploaded_file 特権昇格] |
|---|
| ポイント | 20 |
|---|