| 标题 | Online computer and laptop stores have arbitrary file uploads where administrators upload avatars |
|---|
| 描述 | This project is named the Online Computer and Laptop Store. This web application was developed to provide an online platform for exploring and ordering products for potential customers in a computer store or business. However, there is a serious vulnerability. The store has a avatar function in the administrator's office, which does not verify file content or modify any file suffixes. You can upload any file and obtain server permissions for harmful operations such as command execution through this vulnerability! |
|---|
| 来源 | ⚠️ https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Upload%20any%20file%20at%20the%20administrator%20profile%20upload%20location.pdf |
|---|
| 用户 | boyi (UID 40109) |
|---|
| 提交 | 2023-04-07 11時06分 (3 年前) |
|---|
| 管理 | 2023-04-07 18時40分 (8 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 225319 [SourceCodester Online Computer and Laptop Store 1.0 Avatar /admin/?page=user 权限提升] |
|---|
| 积分 | 20 |
|---|