| 제목 | Bdtask Flight Booking Software B2C Portal v3,1 Unrestricted File Upload |
|---|
| 설명 | The application's "Package Information" module in the B2C portal allows authenticated users to upload an image for a travel package. The file upload functionality fails to validate the file's extension or content type, permitting the upload of executable scripts (e.g., PHP web shells), which leads to Remote Code Execution. |
|---|
| 원천 | ⚠️ https://github.com/4m3rr0r/PoCVulDb/blob/main/README12.md |
|---|
| 사용자 | 4m3rr0r (UID 85795) |
|---|
| 제출 | 2025. 10. 11. PM 03:47 (8 개월 ago) |
|---|
| 모더레이션 | 2025. 10. 25. PM 06:21 (14 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 329893 [Bdtask Flight Booking Software 까지 3.1 Package Information /b2c/package-information 권한 상승] |
|---|
| 포인트들 | 18 |
|---|