| 제목 | https://github.com/huanzi-qch/base-admin base-admin v1.0 Upload any file |
|---|
| 설명 | The base-admin system contains an arbitrary file upload vulnerability. The base-admin management system contains an arbitrary file upload vulnerability. Attackers can upload any file type. Although the target environment does not support JSP parsing, it can still upload HTML files, potentially leading to a stored XSS attack. |
|---|
| 원천 | ⚠️ https://github.com/huanzi-qch/base-admin/issues/38 |
|---|
| 사용자 | Jszdk (UID 95030) |
|---|
| 제출 | 2026. 02. 06. AM 07:13 (8 개월 ago) |
|---|
| 모더레이션 | 2026. 02. 18. AM 09:57 (12 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 346462 [huanzi-qch base-admin 까지 57a8126bb3353a004f3c7722089e3b926ea83596 JSP Parser SysFileController.java upload file 권한 상승] |
|---|
| 포인트들 | 18 |
|---|