Submit #637297: Prain 1.3.3 code injectioninfo

TitlePrain 1.3.3 code injection
DescriptionA vulnerability, which was classified as critical, has been found in Prain up to 1.3.3. Affected by this issue is some unknown functionality of the file /?import of the component HTTP POST Request Handler. The manipulation of the argument file leads to code injection. The attack may be launched remotely
Source⚠️ https://github.com/zly-123/cve/blob/main/Prain%20code%20injection.pdf
User
 qisui (UID 88945)
Submission08/19/2025 10:48 (1 Year ago)
Moderation08/29/2025 10:07 (10 days later)
StatusDuplicate
VulDB entry272072 [Prain up to 1.3.0 HTTP POST Request /?import file code injection]
Points0

Do you need the next level of professionalism?

Upgrade your account now!