提出 #512351: LoveCards LoveCardsV2 2.3.2 External Control of System or Configuration Setting情報

タイトルLoveCards LoveCardsV2 2.3.2 External Control of System or Configuration Setting
説明LoveCardsV2 is a confession wall program built with PHP8, using ThinkPHP as its foundation framework. In the latest version of LoveCardsV2(2.3.2), there is an unauthorized access vulnerability where attackers can modify configurations through unauthorized access, implement file uploads, and ultimately execute code execution.
ソース⚠️ https://ctf-n0el4kls.notion.site/LoveCardsV2-Unauthentication-to-RCE-Vulnerability-19841990f44780de8263c1f77a007a83?pvs=4
ユーザー
 n0el4kls (UID 80089)
送信2025年03月02日 13:09 (1 年 ago)
モデレーション2025年03月11日 16:11 (9 days later)
ステータス承諾済み
VulDBエントリ299290 [LoveCards LoveCardsV2 迄 2.3.2 Setting /api/system/other 特権昇格]
ポイント15

Interested in the pricing of exploits?

See the underground prices here!