Отправить #703238: SourceCodester Real Estate Property Listing App Using PHP and MySQL with Source Code 1 Unrestricted UploadИнформация

НазваниеSourceCodester Real Estate Property Listing App Using PHP and MySQL with Source Code 1 Unrestricted Upload
ОписаниеA vulnerability has been discovered in the SourceCodester Real Estate Property Listing App Using PHP and MySQL with Source Code. The affected feature is the file upload functionality in the `/admin/property.php` file. Attackers can upload arbitrary files using the `image` parameter, potentially gaining a shell .
Источник⚠️ https://github.com/zzdzz7/cve/issues/2
Пользователь
 zzdzz (UID 93061)
Представление28.11.2025 17:33 (10 месяцы назад)
Модерация11.12.2025 10:14 (13 days later)
Статуспринято
Запись VulDB335871 [SourceCodester Real Estate Property Listing App 1.0 /admin/property.php image эскалация привилегий]
Баллы19

Do you want to use VulDB in your project?

Use the official API to access entries easily!