| Название | code-projects Faculty Management System 1.0 Path Traversal: '.../...//' |
|---|
| Описание | During the security review of "Faculty Management System", discovered a critical Unauthorized Path Traversal vulnerability in the "examples.php" file. This vulnerability stems from insufficient user input validation of the 'src' parameter, allowing attackers to inject malicious path file. Therefore, attackers can gain unauthorized access to Operation System File system, access sensitive information. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| Источник | ⚠️ https://github.com/xiaoliyu-1/Faculty-Management-System-examples.php-v.1.0-Path-Traversal/blob/main/report.md |
|---|
| Пользователь | xiaoliyu (UID 90318) |
|---|
| Представление | 18.09.2025 09:05 (1 Год назад) |
|---|
| Модерация | 26.09.2025 10:39 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 325970 [DataTables до 1.10.13 examples.php src обход каталога] |
|---|
| Баллы | 20 |
|---|