| 标题 | itsourcecode society Management System v1.0 File Upload |
|---|
| 描述 | After logging into the website backend, on the /admin/student.php page, it is possible to create student accounts and upload account avatars. The vulnerability lies in the fact that the uploaded avatar file is not strictly filtered, allowing PHP files to be uploaded.
Download Source Code: https://itsourcecode.com/wp-content/uploads/2021/04/Society-Management-System-Project-In-PHP-Free-Download-Source-Code.zip |
|---|
| 来源 | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE7-6.md |
|---|
| 用户 | Dee.Mirage (UID 71702) |
|---|
| 提交 | 2024-07-26 03時19分 (2 年前) |
|---|
| 管理 | 2024-07-28 09時18分 (2 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 272613 [itsourcecode Society Management System 1.0 /admin/student.php image 权限提升] |
|---|
| 积分 | 19 |
|---|