| 标题 | https://www.sourcecodester.com Prison Management System v1.0 remote command/code execute |
|---|
| 描述 | A critical vulnerability has been discovered in the Online Courseware. This affects the edit-photo.php file. No checks are made on the contents and suffixes of files uploaded by users, allowing attackers to upload php files containing malicious code and perform remote command execution. |
|---|
| 来源 | ⚠️ https://github.com/fubxx/CVE/blob/main/PrisonManagementSystemRCE.md |
|---|
| 用户 | LI YU (UID 67398) |
|---|
| 提交 | 2024-04-07 14時28分 (2 年前) |
|---|
| 管理 | 2024-04-07 15時14分 (46 minutes later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 259630 [SourceCodester Prison Management System 1.0 Avatar /Admin/edit-photo.php avatar 权限提升] |
|---|
| 积分 | 17 |
|---|