| Название | SourceCodester Resort Reservation System 1.0 has a local file inclusion vulnerability |
|---|
| Описание | A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is file inclusion functionality of the file /index.php. This vulnerability allows local file inclusion via the page parameter after users logged in, it leads to remote attackers execute system commands by including pearcmd.php. |
|---|
| Источник | ⚠️ https://github.com/Yesec/Resort-Reservation-System/blob/main/local%20file%20inclusion/vuln.md |
|---|
| Пользователь | YeSec (UID 50956) |
|---|
| Представление | 06.08.2023 06:25 (3 лет назад) |
|---|
| Модерация | 06.08.2023 15:49 (9 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 236234 [SourceCodester Resort Reservation System 1.0 index.php page эскалация привилегий] |
|---|
| Баллы | 18 |
|---|