| Название | Bdtask Flight Booking Software B2C Portal v3,1 Unrestricted File Upload |
|---|
| Описание | The application's "Package Information" module in the B2C portal allows authenticated users to upload an image for a travel package. The file upload functionality fails to validate the file's extension or content type, permitting the upload of executable scripts (e.g., PHP web shells), which leads to Remote Code Execution. |
|---|
| Источник | ⚠️ https://github.com/4m3rr0r/PoCVulDb/blob/main/README12.md |
|---|
| Пользователь | 4m3rr0r (UID 85795) |
|---|
| Представление | 11.10.2025 15:47 (12 месяцы назад) |
|---|
| Модерация | 25.10.2025 18:21 (14 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 329893 [Bdtask Flight Booking Software до 3.1 Package Information /b2c/package-information эскалация привилегий] |
|---|
| Баллы | 18 |
|---|