| 标题 | code-projects online-notes-sharing 1 Arbitrary File Upload |
|---|
| 描述 | A critical arbitrary file upload vulnerability exists in the online-notes-sharing project (version 10/11). Due to insufficient file type validation and lack of proper restrictions, attackers can upload malicious files to the server. This vulnerability may lead to remote code execution, full server compromise, or data leakage. |
|---|
| 来源 | ⚠️ https://github.com/yihaofuweng/cve/issues/2 |
|---|
| 用户 | woziziiziz (UID 87194) |
|---|
| 提交 | 2025-06-28 15時02分 (1 年前) |
|---|
| 管理 | 2025-07-06 10時18分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 315036 [code-projects Online Note Sharing 1.0 Profile Image userprofile.php image 权限提升] |
|---|
| 积分 | 18 |
|---|