| タイトル | SourceCodester Hotel and Lodge Management System 1.0 Unrestricted Upload |
|---|
| 説明 | A vulnerability, which was classified as critical, was found in sourcecodester Hotel and Lodge Management System 1.0. This affects some
unknown functionality of the file /manage_website.php . The manipulation of the argument with an unknown input leads to a unrestricted upload vulnerability. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. This is going to have an impact on confidentiality, integrity, and availability.
User can update file through /manage_website.php
Web application doesn't sanitize or filters the being uploaded, making it vulnerable to arbitrary file upload vulnerability, that can also lead to Remote Code Execution. |
|---|
| ソース | ⚠️ https://github.com/TThuyyy/cve1/issues/13 |
|---|
| ユーザー | liuzhouyang1 (UID 91112) |
|---|
| 送信 | 2025年09月30日 03:42 (7 月 ago) |
|---|
| モデレーション | 2025年10月08日 06:48 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 327588 [SourceCodester Hotel and Lodge Management System 迄 1.0 /manage_website.php website_image/back_login_image 特権昇格] |
|---|
| ポイント | 20 |
|---|