| タイトル | code-projects Faculty Management System 1.0 Path Traversal: '.../...//' |
|---|
| 説明 | During the security review of "Faculty Management System", discovered a critical Unauthorized Path Traversal vulnerability in the "examples.php" file. This vulnerability stems from insufficient user input validation of the 'src' parameter, allowing attackers to inject malicious path file. Therefore, attackers can gain unauthorized access to Operation System File system, access sensitive information. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| ソース | ⚠️ https://github.com/xiaoliyu-1/Faculty-Management-System-examples.php-v.1.0-Path-Traversal/blob/main/report.md |
|---|
| ユーザー | xiaoliyu (UID 90318) |
|---|
| 送信 | 2025年09月18日 09:05 (1 年 ago) |
|---|
| モデレーション | 2025年09月26日 10:39 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 325970 [DataTables 迄 1.10.13 examples.php src ディレクトリトラバーサル] |
|---|
| ポイント | 20 |
|---|