提交 #421685: 07fly crm S1 FileUpload信息

标题07fly crm S1 FileUpload
描述In the 07fly crm S1 system, there is a File.php controller. The fileUpload method in this controller can be used to upload files. There is no file suffix or file content filtering in this method.
来源⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE19-1.md
用户
 Dee.Mirage (UID 71702)
提交2024-10-10 15時06分 (2 年前)
管理2024-10-12 08時26分 (2 days later)
状态已接受
VulDB条目280179 [07FLYCMS/07FLY-CMS/07FlyCRM 直到 1.2.0 /admin/File/fileUpload file 权限提升]
积分15

Want to know what is going to be exploited?

We predict KEV entries!