| Название | https://gitee.com/technical-laohu/mpay mpay v1.2.4 Arbitrary file upload vulnerability |
|---|
| Описание | There is an arbitrary file upload vulnerability in the QR code image upload function of mpay account management in the latest v1.2.4 version，Attackers can upload malicious files (such as webshells, viruses, and malicious scripts) to gain control of the server or steal sensitive information. |
|---|
| Источник | ⚠️ https://github.com/bdkuzma/vuln/issues/17 |
|---|
| Пользователь | baihekuz (UID 84516) |
|---|
| Представление | 10.01.2026 05:22 (9 месяцы назад) |
|---|
| Модерация | 18.01.2026 14:59 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 341745 [technical-laohu mpay до 1.2.4 QR Code Image codeimg эскалация привилегий] |
|---|
| Баллы | 18 |
|---|