| 标题 | itsourcecode Farm Management System 1.0 Code Injection |
|---|
| 描述 | In the add-pig.php file of the "Farm Management System In PHP" project, attackers can upload malicious code files through the parameter $res1_name. Due to the lack of proper validation and sanitation of the uploaded files, attackers are able to directly upload malicious files to the server, leading to the risk of arbitrary code execution. |
|---|
| 来源 | ⚠️ https://github.com/yunhai666/cve/issues/2 |
|---|
| 用户 | weiwei-abc (UID 80329) |
|---|
| 提交 | 2025-01-18 12時15分 (2 年前) |
|---|
| 管理 | 2025-01-19 21時00分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 292600 [itsourcecode Farm Management System 直到 1.0 /add-pig.php pigphoto 权限提升] |
|---|
| 积分 | 19 |
|---|