| 标题 | Walterjnr1 Employee Management System V1.0 Unrestricted Upload |
|---|
| 描述 | The application suffers from an arbitrary file upload vulnerability. An attacker (regardless of their identity or privilege level) can construct a malicious file upload request to bypass file type restrictions. This allows the attacker to upload arbitrary executable files (such as malicious PHP scripts) directly to the server. Successful exploitation can lead to Remote Code Execution (RCE) or complete server takeover, severely compromising the system's integrity and security.
|
|---|
| 来源 | ⚠️ https://github.com/whatyourname12345/CVE/blob/main/EMS/EMS_UnrestrictedUpload.md |
|---|
| 用户 | chenkh (UID 96588) |
|---|
| 提交 | 2026-03-20 04時01分 (7 月前) |
|---|
| 管理 | 2026-04-04 16時48分 (15 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 252277 [SourceCodester Employee Management System 1.0 Profile Page edit-photo.php 权限提升] |
|---|
| 积分 | 0 |
|---|