제출 #556135: https://gitee.com/panhainan/DS-Java DS-Java 1.0 Code Injection via File Upload정보

제목https://gitee.com/panhainan/DS-Java DS-Java 1.0 Code Injection via File Upload
설명The uploadUserPic.action interface of DS-Java 1.0 version is vulnerable to arbitrary file upload. An attacker can execute JSP code by uploading malicious.jsp files.
원천⚠️ https://github.com/caigo8/CVE-md/blob/main/DS-Java/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.md
사용자
 Caigo (UID 81287)
제출2025. 04. 10. PM 08:42 (1 년도 ago)
모더레이션2025. 04. 21. PM 03:12 (11 days later)
상태수락
VulDB 항목305771 [panhainan DS-Java 1.0 FileUpload.java uploadUserPic.action fileUpload 권한 상승]
포인트들15

Do you want to use VulDB in your project?

Use the official API to access entries easily!