| Название | https://github.com/osuuu/LightPicture LightPicture 1.2.2 unauthorized file upload |
|---|
| Описание | osuuu LightPicture 1.2.2 version has an unauthorized file upload vulnerability. This vulnerability allows anyone to upload PHP files to the server without logging in, thereby being able to execute arbitrary PHP code to obtain server permissions. |
|---|
| Источник | ⚠️ https://github.com/sheratan4/cve/issues/1 |
|---|
| Пользователь | sheratan (UID 71236) |
|---|
| Представление | 21.02.2025 12:29 (2 лет назад) |
|---|
| Модерация | 01.03.2025 20:58 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 298102 [osuuu LightPicture 1.2.2 /app/controller/Api.php upload file эскалация привилегий] |
|---|
| Баллы | 16 |
|---|