| 标题 | Realce Tecnologia Queue ticket kiosk web application N/A Improper File Upload Validation |
|---|
| 描述 | Title: Realce Tecnologia queue ticket kiosk vulnerable to Improper File Upload Validation
Software affected: Realce tecnologia web application in queue ticket kiosk (There is no version in the application pages)
Vendor: Realce Tecnologia - https://www.realcetecnologia.com.br/
Description:
The application includes a logo upload functionality that is intended to accept only JPG, PNG, GIF, WEBP or JPEG files. However, file type validation is performed client-side, and can be bypassed by modifying the request manually, allowing attackers to upload unauthorized PHP files.
Technical Details:
Using a proxy tool like Burp Suite, an attacker can intercept the upload request and change the filename and content-type to reflect a .php file. The application fails to enforce proper server-side validation and accepts the file.
Impact:
If the uploaded PHP file is accessible from the web server, this can lead to webshells, remote code execution (RCE), full system compromise, or data leakage.
The exploitation evidences will be sent by e-mail. |
|---|
| 用户 | Anonymous User |
|---|
| 提交 | 2025-05-17 16時43分 (1 年前) |
|---|
| 管理 | 2025-05-25 19時14分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 310266 [Realce Tecnologia Queue Ticket Kiosk 直到 20250517 Image File /adm/ajax.php files[] 权限提升] |
|---|
| 积分 | 17 |
|---|