제출 #393375: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUpload정보

제목Chengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUpload
설명In the FileManagerController.php controller, the rename method can modify the name of the file, but due to improper filtering, attackers can directly modify the file suffix to php file.
원천⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE4-2.md
사용자
 wanglun (UID 73616)
제출2024. 08. 18. AM 09:59 (2 연령 ago)
모더레이션2024. 08. 26. AM 09:22 (8 days later)
상태수락
VulDB 항목275762 [Chengdu Everbrite Network Technology BeikeShop 까지 1.5.5 FileManagerController.php rename new_name 권한 상승]
포인트들15

Want to stay up to date on a daily basis?

Enable the mail alert feature now!