提出 #568467: Sourcecodester Online Student Clearance System 1.0 Unrestricted Upload情報

タイトルSourcecodester Online Student Clearance System 1.0 Unrestricted Upload
説明User can update file through /edit-photo.php. Users must authenticate with valid credentials to access the system. A vulnerability exists in the profile picture upload functionality where inadequate filtering of malicious file extensions allows attackers to upload webshell files, leading to RCE.
ソース⚠️ https://github.com/Xiaoyi-ing/CVE/issues/1
ユーザー
 me1ody (UID 84857)
送信2025年05月01日 11:24 (1 年 ago)
モデレーション2025年05月15日 08:53 (14 days later)
ステータス重複
VulDBエントリ308087 [SourceCodester Online Student Clearance System 1.0 /edit-photo.php userImage 特権昇格]
ポイント0

Do you want to use VulDB in your project?

Use the official API to access entries easily!