| Название | projectworlds.com rental And Property Listing Project V1.0 File unrestricted upload |
|---|
| Описание | During the security review of "House rental And Property Listing", I discovered a critical file unrestricted upload vulnerability in the "/app/register.php?action=reg " file. This vulnerability arises from inadequate validation and restrictions on the parameter when handling file uploads, enabling attackers to upload arbitrary files. As a result, attackers can execute malicious code on the server, gain unauthorized access to the system, and compromise data security. Immediate remedial measures are required to ensure system security and protect data integrity. |
|---|
| Источник | ⚠️ https://github.com/1uzpk/cve/issues/4 |
|---|
| Пользователь | 1uzpk (UID 94148) |
|---|
| Представление | 06.01.2026 08:31 (5 месяцы назад) |
|---|
| Модерация | 06.01.2026 14:56 (6 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 339686 [projectworlds House Rental and Property Listing 1.0 Signup register.php?action=reg image эскалация привилегий] |
|---|
| Баллы | 20 |
|---|