| Название | kkFileView 4.4.0 Arbitrary File Writing |
|---|
| Описание | User can upload a compressed file which includes arbitrary kind of file types, when they preview the compressed file, it will be decompressed automatically without any check, so some dangerous file like .jsp .exe, etc. will be saved in the server. |
|---|
| Источник | ⚠️ https://magnificent-dill-351.notion.site/Arbitrary-File-Upload-in-kkFileView-4-4-0-1e3c693918ed802581faccab9140a130 |
|---|
| Пользователь | s0l42 (UID 82389) |
|---|
| Представление | 28.04.2025 11:58 (1 Год назад) |
|---|
| Модерация | 10.05.2025 14:58 (12 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 308283 [kkFileView 4.4.0 /fileUpload Файл эскалация привилегий] |
|---|
| Баллы | 13 |
|---|