| Название | code-projects Online Bike Rental System v1.0 Incomplete Identification of Uploaded File Variables |
|---|
| Описание | All files in changeimage *. php have incomplete identification of upload file variables. Hackers can directly upload files with any extension. If the content of the file contains malicious content, it may result in the loss of server permissions. |
|---|
| Источник | ⚠️ https://github.com/Huandtx/cve/blob/main/cve/Online%20Bike%20Rental%20System/File_upload1.md |
|---|
| Пользователь | huandtx (UID 79079) |
|---|
| Представление | 06.01.2025 13:04 (2 лет назад) |
|---|
| Модерация | 08.01.2025 18:16 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 290822 [code-projects Online Bike Rental System 1.0 Change Image эскалация привилегий] |
|---|
| Баллы | 16 |
|---|