| 标题 | Prain 1.3.3 code injection |
|---|
| 描述 | A vulnerability, which was classified as critical, has been found in Prain up to 1.3.3. Affected by this
issue is some unknown functionality of the file /?import of the component HTTP POST Request
Handler. The manipulation of the argument file leads to code injection. The attack may be launched
remotely |
|---|
| 来源 | ⚠️ https://github.com/zly-123/cve/blob/main/Prain%20code%20injection.pdf |
|---|
| 用户 | qisui (UID 88945) |
|---|
| 提交 | 2025-08-19 10時48分 (1 年前) |
|---|
| 管理 | 2025-08-29 10時07分 (10 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 272072 [Prain 直到 1.3.0 HTTP POST Request /?import file 权限提升] |
|---|
| 积分 | 0 |
|---|