提出 #505007: https://github.com/osuuu/LightPicture LightPicture 1.2.2 unauthorized file upload情報

タイトルhttps://github.com/osuuu/LightPicture LightPicture 1.2.2 unauthorized file upload
説明osuuu LightPicture 1.2.2 version has an unauthorized file upload vulnerability. This vulnerability allows anyone to upload PHP files to the server without logging in, thereby being able to execute arbitrary PHP code to obtain server permissions.
ソース⚠️ https://github.com/sheratan4/cve/issues/1
ユーザー
 sheratan (UID 71236)
送信2025年02月21日 12:29 (2 年 ago)
モデレーション2025年03月01日 20:58 (8 days later)
ステータス承諾済み
VulDBエントリ298102 [osuuu LightPicture 1.2.2 /app/controller/Api.php upload file 特権昇格]
ポイント16

Interested in the pricing of exploits?

See the underground prices here!