Gửi #696051: Campcodes Retro Basketball Shoes Online Store v1.0 Unrestricted Uploadthông tin

tiêu đềCampcodes Retro Basketball Shoes Online Store v1.0 Unrestricted Upload
Mô tảA critical file upload vulnerability exists in the file of 'Retro Basketball Shoes Online Store' V1.0, allowing attackers to upload malicious PHP scripts (such as AntSword webshells) by bypassing file type and content validation. Once uploaded, attackers can use the AntSword client to establish a connection via formatted POST requests, enabling full control over the target system, including executing system commands, browsing the file system, and stealing sensitive data. /admin/admin_product.php
Nguồn⚠️ https://github.com/Abxery/cveee/issues/6
Người dùng abxery (UID 91725)
Đệ trình15/11/2025 13:13 (cách đây 11 các tháng)
Kiểm duyệt19/11/2025 16:01 (4 days later)
Trạng tháiđược chấp nhận
Mục VulDB332945 [Campcodes Retro Basketball Shoes Online Store 1.0 /admin/admin_product.php product_image nâng cao đặc quyền]
điểm20

Do you want to use VulDB in your project?

Use the official API to access entries easily!