Gửi #800690: code-projects Invoice System in Laravel 1.0 Arbitrary File Uploadthông tin

tiêu đềcode-projects Invoice System in Laravel 1.0 Arbitrary File Upload
Mô tảThe company logo upload validation is bypassed due to a mismatch between the form field name and the validation rules. This allows attackers to upload files of any type (including PHP scripts) to a public directory without being blocked by the intended image validation.
Nguồn⚠️ https://gist.github.com/higordiego/ea5944bd29cffee1162491d60ed5785a
Người dùng
 c4ttr4ck (UID 75518)
Đệ trình09/04/2026 03:46 (cách đây 6 các tháng)
Kiểm duyệt26/04/2026 16:45 (18 days later)
Trạng tháiđược chấp nhận
Mục VulDB359708 [code-projects Invoice System in Laravel 1.0 /company logo nâng cao đặc quyền]
điểm17

Interested in the pricing of exploits?

See the underground prices here!