| 제목 | DedeBIZ DedeBIZ <=6.2.12 file upload |
|---|
| 설명 | When logging into the backend as an administrator, we can upload files in the attachment management section. Here, we can upload files, and the backend likely detects whether the uploaded file is an image based on its file signature. However, this means we can upload arbitrary PHP files, potentially leading to command execution. |
|---|
| 원천 | ⚠️ https://github.com/JTZ-a/SRC/blob/master/DedeBIZ/DedeBIZ%20-%20file%20upload/README.md |
|---|
| 사용자 | JTZ- (UID 59232) |
|---|
| 제출 | 2023. 12. 20. AM 06:25 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 12. 29. PM 11:20 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 249368 [Muyun DedeBIZ 까지 6.2.12 Add Attachment 권한 상승] |
|---|
| 포인트들 | 18 |
|---|