| tiêu đề | Engineers Online Portal System has a file upload (RCE) vulnerability |
|---|
| Mô tả | Engineers Online Portal System has a file upload (RCE) vulnerability, vulnerability exists in student_avatar.php file, Can upload any format of the file, and there is no limit, the file name is the file name when uploaded, developers should limit the type of file uploaded by users, otherwise it will lead to users to obtain server permissions, steal sensitive data, serious or even lead to server crash, a large number of user privacy disclosure.
Source DownLoad:https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html |
|---|
| Nguồn | ⚠️ https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Engineers%20Online%20Portal%20System%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf |
|---|
| Người dùng | llixixioo (UID 54584) |
|---|
| Đệ trình | 23/09/2023 15:19 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 29/09/2023 11:49 (6 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 240905 [SourceCodester Engineers Online Portal 1.0 student_avatar.php change nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|