| Title | Jinan galloping information technology Co., LTD JFlow 2.0.0 Exposure of Access Control List Files to an Unauthorized Control |
|---|
| Description | Gallop JFlow management system Third, vulnerability location /WF/Ath/EntityMutliFile_Load.do |
|---|
| Source | ⚠️ https://github.com/sweatxi/BugHub/blob/main/Jinan%20Gallop%20JFlow%20CMS%20port%20is%20not%20authorized%20to%20cause%20the%20leakage%20of%20database%20attachment%20information.pdf |
|---|
| User | hexixi (UID 59932) |
|---|
| Submission | 09/11/2024 10:01 (2 years ago) |
|---|
| Moderation | 09/19/2024 16:27 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 278153 [Jinan Chicheng Company JFlow 2.0.0 Attachment EntityMutliFile_Load.do AttachmentUploadController oid access control] |
|---|
| Points | 15 |
|---|