| タイトル | Admission Management System has a file upload (RCE) vulnerability |
|---|
| 説明 | Admission Management System has a file upload (RCE) vulnerability, vulnerability exists in student_avatar.php file, Can upload any format of the file, and there is no limit, the file name is the file name when uploaded, developers should limit the type of file uploaded by users, otherwise it will lead to users to obtain server permissions, steal sensitive data, serious or even lead to server crash, a large number of user privacy disclosure.
Source DownLoad:https://code-projects.org/admission-management-system-in-php-css-and-mysql-free-download/ |
|---|
| ソース | ⚠️ https://github.com/lxxcute/Bug/blob/main/Admission%20Management%20System%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf |
|---|
| ユーザー | Lxx123 (UID 56781) |
|---|
| 送信 | 2023年10月27日 10:47 (3 年 ago) |
|---|
| モデレーション | 2023年10月27日 15:50 (5 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 243728 [code-projects Admission Management System 1.0 student_avatar.php 特権昇格] |
|---|
| ポイント | 20 |
|---|