| Название | itsourcecode society Management System v1.0 File Upload |
|---|
| Описание | After logging into the website backend, on the /admin/student.php page, it is possible to create student accounts and upload account avatars. The vulnerability lies in the fact that the uploaded avatar file is not strictly filtered, allowing PHP files to be uploaded.
Download Source Code: https://itsourcecode.com/wp-content/uploads/2021/04/Society-Management-System-Project-In-PHP-Free-Download-Source-Code.zip |
|---|
| Источник | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE7-6.md |
|---|
| Пользователь | Dee.Mirage (UID 71702) |
|---|
| Представление | 26.07.2024 03:19 (2 лет назад) |
|---|
| Модерация | 28.07.2024 09:18 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 272613 [itsourcecode Society Management System 1.0 /admin/student.php image эскалация привилегий] |
|---|
| Баллы | 19 |
|---|