| 标题 | LoveCards LoveCardsV2 2.3.2 External Control of System or Configuration Setting |
|---|
| 描述 | LoveCardsV2 is a confession wall program built with PHP8, using ThinkPHP as its foundation framework. In the latest version of LoveCardsV2(2.3.2), there is an unauthorized access vulnerability where attackers can modify configurations through unauthorized access, implement file uploads, and ultimately execute code execution. |
|---|
| 来源 | ⚠️ https://ctf-n0el4kls.notion.site/LoveCardsV2-Unauthentication-to-RCE-Vulnerability-19841990f44780de8263c1f77a007a83?pvs=4 |
|---|
| 用户 | n0el4kls (UID 80089) |
|---|
| 提交 | 2025-03-02 13時09分 (2 年前) |
|---|
| 管理 | 2025-03-11 16時11分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 299290 [LoveCards LoveCardsV2 直到 2.3.2 Setting /api/system/other 权限提升] |
|---|
| 积分 | 15 |
|---|