| tiêu đề | ajayrandhawa/User-Management-PHP-MYSQL web 1 File Upload Vulnerability |
|---|
| Mô tả | This project has two file upload vulnerabilities. After downloading the project to your local machine and setting it up successfully, log in to the administrator account using the initial username and password. You can upload files in the user management interface.
The front-end JavaScript validation only checks the file extension, and is limited to JPG/JPEG formats. However, the server-side does not perform adequate validation, nor does it verify the file type or content. Additionally, the file is not renamed to a random name. Therefore, this file upload vulnerability exists. |
|---|
| Nguồn | ⚠️ https://github.com/Lianhaorui/Report/blob/main/FileUpload.docx |
|---|
| Người dùng | lianhaorui (UID 91045) |
|---|
| Đệ trình | 11/10/2025 05:54 (cách đây 12 các tháng) |
|---|
| Kiểm duyệt | 25/10/2025 08:25 (14 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 329871 [ajayrandhawa User-Management-PHP-MYSQL đến fedcf58797bf2791591606f7b61fdad99ad8bff1 User Management Interface /admin/edit-user.php image nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|