Submeter #393375: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUploadinformação

TítuloChengdu Guangda Network Technology BeikeShop <=v1.5.5 FileUpload
DescriçãoIn the FileManagerController.php controller, the rename method can modify the name of the file, but due to improper filtering, attackers can directly modify the file suffix to php file.
Fonte⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE4-2.md
Utilizador
 wanglun (UID 73616)
Submissão18/08/2024 09h59 (há 2 anos)
Moderação26/08/2024 09h22 (8 days later)
EstadoAceite
Entrada VulDB275762 [Chengdu Everbrite Network Technology BeikeShop até 1.5.5 FileManagerController.php rename new_name Elevação de Privilégios]
Pontos15

Interested in the pricing of exploits?

See the underground prices here!