提出 #735775: https://gitee.com/technical-laohu/mpay mpay v1.2.4 Arbitrary file upload vulnerability情報

タイトルhttps://gitee.com/technical-laohu/mpay mpay v1.2.4 Arbitrary file upload vulnerability
説明There is an arbitrary file upload vulnerability in the QR code image upload function of mpay account management in the latest v1.2.4 version,Attackers can upload malicious files (such as webshells, viruses, and malicious scripts) to gain control of the server or steal sensitive information.
ソース⚠️ https://github.com/bdkuzma/vuln/issues/17
ユーザー
 baihekuz (UID 84516)
送信2026年01月10日 05:22 (9 月 ago)
モデレーション2026年01月18日 14:59 (8 days later)
ステータス承諾済み
VulDBエントリ341745 [technical-laohu mpay 迄 1.2.4 QR Code Image codeimg 特権昇格]
ポイント18

Want to know what is going to be exploited?

We predict KEV entries!