| 제목 | SourceCodester Pet grooming management software 1.0 Unrestricted Upload |
|---|
| 설명 | This vulnerability exists in the avatar upload function of profile.php. Due to the lack of effective validation and filtering of user-uploaded files, attackers can upload malicious script files (such as .php backdoors). The system directly saves files using the original filenames provided by users to a web-accessible directory, enabling attackers to access and execute the uploaded malicious scripts via URL. This could lead to gaining control of the server, stealing sensitive data, or launching further attacks. |
|---|
| 원천 | ⚠️ https://github.com/chen2496088236/CVE/issues/8 |
|---|
| 사용자 | 111ctx (UID 89466) |
|---|
| 제출 | 2025. 08. 30. PM 03:46 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 07. PM 08:33 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 323039 [SourceCodester Pet Grooming Management Software 1.0 /admin/profile.php 권한 상승] |
|---|
| 포인트들 | 20 |
|---|