| 标题 | code-projects Faculty Management System 1.0 Path Traversal: '.../...//' |
|---|
| 描述 | During the security review of "Faculty Management System", discovered a critical Unauthorized Path Traversal vulnerability in the "examples.php" file. This vulnerability stems from insufficient user input validation of the 'src' parameter, allowing attackers to inject malicious path file. Therefore, attackers can gain unauthorized access to Operation System File system, access sensitive information. Immediate remedial measures are needed to ensure system security and protect data integrity. |
|---|
| 来源 | ⚠️ https://github.com/xiaoliyu-1/Faculty-Management-System-examples.php-v.1.0-Path-Traversal/blob/main/report.md |
|---|
| 用户 | xiaoliyu (UID 90318) |
|---|
| 提交 | 2025-09-18 09時05分 (1 年前) |
|---|
| 管理 | 2025-09-26 10時39分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 325970 [DataTables 直到 1.10.13 examples.php src 目录遍历] |
|---|
| 积分 | 20 |
|---|