| 标题 | https://github.com/osuuu/LightPicture LightPicture 1.2.2 unauthorized file upload |
|---|
| 描述 | osuuu LightPicture 1.2.2 version has an unauthorized file upload vulnerability. This vulnerability allows anyone to upload PHP files to the server without logging in, thereby being able to execute arbitrary PHP code to obtain server permissions. |
|---|
| 来源 | ⚠️ https://github.com/sheratan4/cve/issues/1 |
|---|
| 用户 | sheratan (UID 71236) |
|---|
| 提交 | 2025-02-21 12時29分 (2 年前) |
|---|
| 管理 | 2025-03-01 20時58分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 298102 [osuuu LightPicture 1.2.2 /app/controller/Api.php upload file 权限提升] |
|---|
| 积分 | 16 |
|---|