Отправить #637297: Prain 1.3.3 code injection

A vulnerability, which was classified as critical, has been found in Prain up to 1.3.3. Affected by this
issue is some unknown functionality of the file /?import of the component HTTP POST Request
Handler. The manipulation of the argument file leads to code injection. The attack may be launched
remotely

• Источник: ⚠️ https://github.com/zly-123/cve/blob/main/Prain%20code%20injection.pdf
• Пользователь: qisui (UID 88945)
• Представление: 19.08.2025 10:48 (1 Год назад)
• Модерация: 29.08.2025 10:07 (10 days later)
• Статус: Дубликат
• Запись VulDB: 272072 [Prain до 1.3.0 HTTP POST Request /?import file эскалация привилегий]
• Баллы: 0