Submeter #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writesinformação

Títulohttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
DescriçãoA vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
Fonte⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
Utilizador
 J1rrY (UID 64327)
Submissão16/07/2024 10h25 (há 2 anos)
Moderação20/07/2024 12h21 (4 days later)
EstadoAceite
Entrada VulDB272072 [Prain até 1.3.0 HTTP POST Request /?import file Elevação de Privilégios]
Pontos16

Do you need the next level of professionalism?

Upgrade your account now!