| 标题 | https://gitee.com/technical-laohu/mpay mpay v1.2.4 Arbitrary file upload vulnerability |
|---|
| 描述 | There is an arbitrary file upload vulnerability in the QR code image upload function of mpay account management in the latest v1.2.4 version，Attackers can upload malicious files (such as webshells, viruses, and malicious scripts) to gain control of the server or steal sensitive information. |
|---|
| 来源 | ⚠️ https://github.com/bdkuzma/vuln/issues/17 |
|---|
| 用户 | baihekuz (UID 84516) |
|---|
| 提交 | 2026-01-10 05時22分 (9 月前) |
|---|
| 管理 | 2026-01-18 14時59分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 341745 [technical-laohu mpay 直到 1.2.4 QR Code Image codeimg 权限提升] |
|---|
| 积分 | 18 |
|---|