| 标题 | itsourcecode Laravel Property Management System v1.0 FileUpload |
|---|
| 描述 | In the PropertiesController.php controller, the upload method is used to upload images. However, since the image detection rules in the UpdatePropertiesRequest class can be bypassed, attackers can directly upload Webshell files. |
|---|
| 来源 | ⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE2-1.md |
|---|
| 用户 | wanglun (UID 73616) |
|---|
| 提交 | 2024-08-18 09時55分 (2 年前) |
|---|
| 管理 | 2024-08-19 17時10分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 275135 [itsourcecode Laravel Property Management System 1.0 PropertiesController.php upload file 权限提升] |
|---|
| 积分 | 16 |
|---|