提出 #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes情報

タイトルhttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
説明A vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
ソース⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
ユーザー
 J1rrY (UID 64327)
送信2024年07月16日 10:25 (2 年 ago)
モデレーション2024年07月20日 12:21 (4 days later)
ステータス承諾済み
VulDBエントリ272072 [Prain 迄 1.3.0 HTTP POST Request /?import file 特権昇格]
ポイント16

Do you need the next level of professionalism?

Upgrade your account now!