| Название | My Food Recipe Unrestrict File Upload to RCE |
|---|
| Описание | A vulnerability has been found in SourceCodester My Food Recipe 1.0 and classified as problematic.
A vulnerability was found in the Image Upload function on the main page (index.php). The vulnerability relies on the possibility of loading unrestricted files and, consequently, obtaining an RCE through loading PHP files. If the server is running with administrative privileges, the attacker will have the ability to obtain resources with higher privileges.
Below is the image that contains the POC of the vulnerability:
https://bit.ly/p0C |
|---|
| Источник | ⚠️ https://www.sourcecodester.com/php/16816/my-food-recipe-using-php-source-code.html |
|---|
| Пользователь | dokaterroista (UID 54275) |
|---|
| Представление | 17.09.2023 14:25 (3 лет назад) |
|---|
| Модерация | 17.09.2023 19:42 (5 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 239878 [SourceCodester My Food Recipe 1.0 Image Upload index.php эскалация привилегий] |
|---|
| Баллы | 20 |
|---|