| tiêu đề | 37954679 cak-filemanagement-system 5e6433246475e66462e1fea980688de96a049297 Unrestricted Upload |
|---|
| Mô tả | The affected component is `admin/add_logs.php`. The file upload handler accepts any file type and extension without validation. The uploaded file is stored in the web-accessible `admin/` directory using the original filename:
```php
$target_dir = "";
$target_file = $target_dir.$_FILES["file"]["name"];
if (move_uploaded_file($_FILES["file"]["tmp_name"],$target_file)) {
```
The endpoint lacks any session or authentication check. An unauthenticated attacker can upload a PHP web shell (e.g., `shell.php`) that is immediately accessible and executable at `http://<target>/admin/shell.php`, resulting in unauthenticated remote code execution on the web server.
|
|---|
| Nguồn | ⚠️ https://github.com/37954679/cak-filemanagement-system/issues/2 |
|---|
| Người dùng | Anonymous User |
|---|
| Đệ trình | 12/10/2026 21:41 (cách đây 25 ngày) |
|---|
| Kiểm duyệt | 30/10/2026 13:37 (18 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 429059 [37954679 cak-filemanagement-system đến 5e6433246475e66462e1fea980688de96a049297 admin/add_logs.php move_uploaded_file nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|