Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PEEL 任意文件上传漏洞
Vulnerability Description
PEEL，可能是3.x以及之前的版本中的administrer/produits.php存在未限制文件上传漏洞。远程认证管理员借助ajout操作中的一个修改过的内容类型(比如(1)image/gif和(2)application/pdf)，上传和运行任意的PHP文件。
CVSS Information
N/A
Vulnerability Type
N/A