Submeter #636624: https://github.com/yeqifu/carRental carRental 1.0 Memory Corruptioninformação

Títulohttps://github.com/yeqifu/carRental carRental 1.0 Memory Corruption
DescriçãoThe car/updateCar.action interface in version 1.0 of carRental has an arbitrary deletion vulnerability. Attackers can delete any files on the server by using the carimg parameter.
Fonte⚠️ https://github.com/JetpropelledSnake/CVE-File/blob/main/Unrestricted%20deletion%20of%20any%20file.md
Utilizador
 CoiledMag4 (UID 88961)
Submissão18/08/2025 04h18 (há 8 meses)
Moderação29/08/2025 08h38 (11 days later)
EstadoAceite
Entrada VulDB321858 [yeqifu carRental até 3fabb7eae93d209426638863980301d6f99866b3 AppFileUtils.java removeFileByPath carimg Travessia de Diretório]
Pontos15

Interested in the pricing of exploits?

See the underground prices here!