| Título | sourcecodester EMPLOYEE AND VISITOR GATE PASS LOGGING SYSTEM v1.0 files upload |
|---|
| Descrição | System Employee and Guest Gate Pass Logging 1.0 is vulnerable to an unrestricted file upload attack via /employee_gatepass/classes/Users.php?f=ssave. This function does not impose restrictions on upload suffixes. A malicious actor could exploit this vulnerability to directly take over the target server. |
|---|
| Fonte | ⚠️ https://github.com/I-Schnee-I/cev/blob/main/upload.md |
|---|
| Utilizador | Schnee (UID 68656) |
|---|
| Submissão | 14/05/2024 04h34 (há 2 anos) |
|---|
| Moderação | 15/05/2024 13h43 (1 day later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 264456 [SourceCodester Employee and Visitor Gate Pass Logging System 1.0 Users.php?f=ssave img Elevação de Privilégios] |
|---|
| Pontos | 18 |
|---|