| タイトル | DedeBIZ DedeBIZ <=6.2.12 file upload |
|---|
| 説明 | When logging into the backend as an administrator, we can upload files in the attachment management section. Here, we can upload files, and the backend likely detects whether the uploaded file is an image based on its file signature. However, this means we can upload arbitrary PHP files, potentially leading to command execution. |
|---|
| ソース | ⚠️ https://github.com/JTZ-a/SRC/blob/master/DedeBIZ/DedeBIZ%20-%20file%20upload/README.md |
|---|
| ユーザー | JTZ- (UID 59232) |
|---|
| 送信 | 2023年12月20日 06:25 (3 年 ago) |
|---|
| モデレーション | 2023年12月29日 23:20 (10 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 249368 [Muyun DedeBIZ 迄 6.2.12 Add Attachment 特権昇格] |
|---|
| ポイント | 18 |
|---|