| tiêu đề | itsourcecode Free Hotel Reservation System V1.0 Unrestricted Upload |
|---|
| Mô tả | During the security review of the "Free Hotel Reservation System", a critical file upload vulnerability was identified in the file "/admin/mod_amenities/index.php?view=add". This vulnerability arises because the backend fails to validate both the file extension and the content of uploaded files. Attackers can exploit this to upload PHP files and perform malicious actions such as command execution. Immediate remediation measures are required to ensure system security and data integrity. |
|---|
| Nguồn | ⚠️ https://github.com/bybinyu/Vulnerability-Practice/issues/4 |
|---|
| Người dùng | binyu (UID 96262) |
|---|
| Đệ trình | 10/03/2026 15:21 (cách đây 7 các tháng) |
|---|
| Kiểm duyệt | 26/03/2026 07:09 (16 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 353558 [itsourcecode Free Hotel Reservation System 1.0 index.php?view=add image nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|