| tiêu đề | MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 Arbitrary File Upload |
|---|
| Mô tả | The Online College Event Hall Reservation System is vulnerable to an Arbitrary File Upload issue within its `/admin/update-rooms.php` script. Attackers can exploit this by uploading files with arbitrary content, such as a PHP script, under the guise of an image file update for a room. The lack of adequate validation on the uploaded file's type and content allows for the execution of server-side scripts, posing a significant security risk. This vulnerability highlights the importance of implementing strict file validation checks, including verifying mime types and file extensions, to prevent the uploading and execution of potentially malicious files. |
|---|
| Nguồn | ⚠️ https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/MAGESH-K21%20%20Online-College-Event-Hall-Reservation-System/Arbitrary%20File%20Upload%20-%20update-rooms.php.md |
|---|
| Người dùng | nochizplz (UID 64302) |
|---|
| Đệ trình | 08/03/2024 05:53 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 15/03/2024 17:29 (7 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 256968 [MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 /admin/update-rooms.php nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|