| Título | code-projects Online Lot Reservation System 1.0 Unrestricted Upload |
|---|
| Descrição | A vulnerability has been found in Online Lot Reservation System 1.0 and classified as critical. This vulnerability affects an unknown function of the file activity.php. The manipulation of the argument directory in combination with insufficient validation of uploaded files leads to unrestricted upload and path traversal. This allows an attacker to upload arbitrary files to unintended locations and potentially execute malicious code on the server. The attack can be initiated remotely. |
|---|
| Fonte | ⚠️ https://github.com/zzk6th/cve/issues/3 |
|---|
| Utilizador | z0ng (UID 96775) |
|---|
| Submissão | 09/04/2026 14h00 (há 5 meses) |
|---|
| Moderação | 26/04/2026 21h21 (17 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 359732 [code-projects Online Lot Reservation System 1.0 /activity.php directory Elevação de Privilégios] |
|---|
| Pontos | 20 |
|---|