| 제목 | sourcecodester Employee and visitor pass logging system v1.0 Directory traversal |
|---|
| 설명 | The employee and visitor pass login system 1.0 has an unrestricted directory traversal attack, the attack method is /employee_gatepass/database/ /employee_gatepass/dist/ /employee_gatepass/libs/ /employee_gatepass/uploads/. Accessing the following route will allow unrestricted access to any file in the directory and can directly download it, thereby obtaining sensitive information from the server. |
|---|
| 원천 | ⚠️ https://github.com/happytraveller-alone/cve/blob/main/dir.md |
|---|
| 사용자 | happytraveller (UID 82753) |
|---|
| 제출 | 2025. 03. 13. PM 01:02 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 03. 22. AM 09:10 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 300667 [SourceCodester Employee and Visitor Gate Pass Logging System 1.0 정보 공개] |
|---|
| 포인트들 | 20 |
|---|