Gửi #505007: https://github.com/osuuu/LightPicture LightPicture 1.2.2 unauthorized file uploadthông tin

tiêu đềhttps://github.com/osuuu/LightPicture LightPicture 1.2.2 unauthorized file upload
Mô tảosuuu LightPicture 1.2.2 version has an unauthorized file upload vulnerability. This vulnerability allows anyone to upload PHP files to the server without logging in, thereby being able to execute arbitrary PHP code to obtain server permissions.
Nguồn⚠️ https://github.com/sheratan4/cve/issues/1
Người dùng
 sheratan (UID 71236)
Đệ trình21/02/2025 12:29 (cách đây 2 những năm)
Kiểm duyệt01/03/2025 20:58 (8 days later)
Trạng tháiđược chấp nhận
Mục VulDB298102 [osuuu LightPicture 1.2.2 /app/controller/Api.php upload file nâng cao đặc quyền]
điểm16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!