| Название | LoveCards LoveCardsV2 2.3.2 External Control of System or Configuration Setting |
|---|
| Описание | LoveCardsV2 is a confession wall program built with PHP8, using ThinkPHP as its foundation framework. In the latest version of LoveCardsV2(2.3.2), there is an unauthorized access vulnerability where attackers can modify configurations through unauthorized access, implement file uploads, and ultimately execute code execution. |
|---|
| Источник | ⚠️ https://ctf-n0el4kls.notion.site/LoveCardsV2-Unauthentication-to-RCE-Vulnerability-19841990f44780de8263c1f77a007a83?pvs=4 |
|---|
| Пользователь | n0el4kls (UID 80089) |
|---|
| Представление | 02.03.2025 13:09 (1 Год назад) |
|---|
| Модерация | 11.03.2025 16:11 (9 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 299290 [LoveCards LoveCardsV2 до 2.3.2 Setting /api/system/other эскалация привилегий] |
|---|
| Баллы | 15 |
|---|