提交 #562717: sparkshop <=v1.1.7 Code Injection信息

标题sparkshop <=v1.1.7 Code Injection
描述The uploadFile in SparkShop system v1.1.7 allows for arbitrary file uploads, enabling arbitrary code execution
来源⚠️ https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf
用户
 Qianyi (UID 71159)
提交2025-04-20 17時30分 (1 年前)
管理2025-05-04 08時56分 (14 days later)
状态重复
VulDB条目271403 [Nanjing Xingyuantu Technology SparkShop 直到 1.1.6 /api/Common/uploadFile file 权限提升]
积分0

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!