| タイトル | CodeAstro Online Job Portal V1.0 arbitrary file upload |
|---|
| 説明 | During the security review of "Online Job Portal Project",I discovered a critical arbitrary file upload vulnerability in the "users/update-profile.php" file. This vulnerability stems from insufficient user input validation of uploaded images, allowing attackers to upload malicious scripts. Therefore, attackers can execurte arbitrary commands, steal data, or compromise complete system. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| ソース | ⚠️ https://github.com/Witiers/CVEs/issues/3 |
|---|
| ユーザー | Witiers (UID 99561) |
|---|
| 送信 | 2026年07月06日 09:24 (2 月 ago) |
|---|
| モデレーション | 2026年08月21日 07:26 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 394032 [CodeAstro Online Job Portal 1.0 update-profile.php 名前 特権昇格] |
|---|
| ポイント | 20 |
|---|