提出 #261124: Engineers Online Portal Web 1.0 Remote Code Execution through File Upload情報

タイトルEngineers Online Portal Web 1.0 Remote Code Execution through File Upload
説明Dear Ladies and Gentlemen, I hope this message finds you well. I would like to express my gratitude for your valuable time and attention. My brother and I have successfully identified a medium-level vulnerability, "Remote Code Execution through File Upload", within your Engineers Online Portal Application. Consequently, I am writing this email to provide you with a comprehensive Proof of Concept, including a video demonstration and relevant screenshots. Furthermore, I would like to kindly request your consideration in assigning a CVE identifier to this discovery. I have attached a previous example for the same application for your reference. Link for the previous CVE https://vuldb.com/?id.249182 Thank you once again for your time, and I look forward to your response. Sincerely, Ahmed Hassan
ソース⚠️ https://mega.nz/file/rI8mCADb#TI-I8dbZBBg42WOs5sqjzzYJDaxEo9U22p62lo9myHo
ユーザー
 ahmed8199 (UID 60803)
送信2024年01月02日 00:57 (3 年 ago)
モデレーション2024年01月02日 11:23 (10 hours later)
ステータス重複
VulDBエントリ249443 [RRJ Nueva Ecija Engineer Online Portal 1.0 Avatar dasboard_teacher.php 特権昇格]
ポイント0

Want to know what is going to be exploited?

We predict KEV entries!