| Название | Code-projects Content Management System v1.0 Arbitrary file upload vulnerability |
|---|
| Описание | A Arbitrary file upload vulnerability vulnerability was identified within the " editposts.php" file of the "Content Management System" project. The root cause is that attackers can bypass file type detection via "Content-Type". Then upload malicious Trojan files. As a result, attackers can upload malicious scripts and execute them to directly control servers, steal data, or launch subsequent attacks that seriously threaten system security. In order to safeguard system security and maintain data integrity and confidentiality, corrective action must be taken immediately. |
|---|
| Источник | ⚠️ https://github.com/Limingqian123/CVE/issues/7 |
|---|
| Пользователь | Mobird (UID 93849) |
|---|
| Представление | 26.12.2025 04:03 (8 месяцы назад) |
|---|
| Модерация | 28.12.2025 11:10 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 338584 [code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /admin/editposts.php image эскалация привилегий] |
|---|
| Баллы | 20 |
|---|