| 标题 | PHPGurukul Tourism Management System V1.0 Unrestricted Upload |
|---|
| 描述 | The package creation feature contains a critical file upload vulnerability that allows authenticated attackers to upload malicious PHP files due to complete lack of validation. This can lead to complete system compromise through remote code execution. |
|---|
| 来源 | ⚠️ https://github.com/ltranquility/CVE/issues/4 |
|---|
| 用户 | Customer (UID 83474) |
|---|
| 提交 | 2025-06-14 11時10分 (1 年前) |
|---|
| 管理 | 2025-06-19 12時32分 (5 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 260918 [PHPGurukul Tourism Management System 2.0 create-package.php 权限提升] |
|---|
| 积分 | 0 |
|---|