| タイトル | github.com Remote Clinic System V2.0 File unrestricted upload |
|---|
| 説明 | During the security review of "Remote Clinic System", I discovered a critical file unrestricted upload vulnerability in the "/staff/edit-my-profile.php " file. This vulnerability arises from inadequate validation and restrictions on the parameter when handling file uploads, enabling attackers to upload arbitrary files. As a result, attackers can execute malicious code on the server, gain unauthorized access to the system, and compromise data security. Immediate remedial measures are required to ensure system security and protect data integrity. |
|---|
| ソース | ⚠️ https://github.com/diy777/cve/issues/2 |
|---|
| ユーザー | diy777 (UID 89447) |
|---|
| 送信 | 2025年08月25日 03:12 (10 月 ago) |
|---|
| モデレーション | 2025年08月31日 22:02 (7 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 322075 [RemoteClinic 迄 2.0 edit-my-profile.php image 特権昇格] |
|---|
| ポイント | 20 |
|---|