Отправить #375244: https://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writesИнформация

Названиеhttps://prain.cn/ Prain Open source PHP light blog program <=1.3.0 arbitrary file writes
ОписаниеA vulnerability classified as critical has been discovered in the prain PHP light blog application. This affects the install section of the file index.php. Manipulation of the file parameter results in arbitrary file writes cause code execution.
Источник⚠️ https://gist.github.com/J1rrY-learn/c5818d700476c4debcf8a334a5c9c243
Пользователь
 J1rrY (UID 64327)
Представление16.07.2024 10:25 (2 лет назад)
Модерация20.07.2024 12:21 (4 days later)
Статуспринято
Запись VulDB272072 [Prain до 1.3.0 HTTP POST Request /?import file эскалация привилегий]
Баллы16

Interested in the pricing of exploits?

See the underground prices here!