| 제목 | Pixtream v1.0.0 Random file upload getshell vulnerability |
|---|
| 설명 | theRealSain/Pixtream has a Random file upload getshell vulnerability. During the security review of "Pixtream", I found an arbitrary file upload vulnerability in the "post_upload.php" file. This vulnerability is caused by the user's lack of strict filtering when uploading pictures. The attacker can modify the Content-Type and bypass the security detection, resulting in arbitrary file upload vulnerabilities and upload webshell. Attackers can deploy backdoors, WebShell and other malicious programs on the server, so as to achieve remote code execution and server control, further steal sensitive data or disrupt the normal operation of the business system. |
|---|
| 원천 | ⚠️ https://github.com/yingxiujie/cve/issues/11 |
|---|
| 사용자 | yingxiujie (UID 96521) |
|---|
| 제출 | 2026. 07. 20. AM 10:40 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 22. PM 06:22 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 408523 [theRealSain Pixtream 까지 866afd4f0cea812b918780fb74b67dccf8c4d6a0 /post_upload.php media 권한 상승] |
|---|
| 포인트들 | 20 |
|---|