提交 #556135: https://gitee.com/panhainan/DS-Java DS-Java 1.0 Code Injection via File Upload

The uploadUserPic.action interface of DS-Java 1.0 version is vulnerable to arbitrary file upload. An attacker can execute JSP code by uploading malicious.jsp files.

• 来源: ⚠️ https://github.com/caigo8/CVE-md/blob/main/DS-Java/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.md
• 用户: Caigo (UID 81287)
• 提交: 2025-04-10 20時42分 (2 年前)
• 管理: 2025-04-21 15時12分 (11 days later)
• 状态: 已接受
• VulDB条目: 305771 [panhainan DS-Java 1.0 FileUpload.java uploadUserPic.action fileUpload 权限提升]
• 积分: 15