漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
Project Pier <= 0.8.8 Arbitrary File Upload RCE
漏洞信息
Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php. The upload handler fails to validate the file type or enforce authentication, allowing remote attackers to upload malicious PHP files directly into a web-accessible directory. The uploaded file is stored with a predictable suffix and can be executed by requesting its URL, resulting in remote code execution.
漏洞信息
N/A
漏洞
危险类型文件的不加限制上传
漏洞
ProjectPier 安全漏洞
漏洞信息
ProjectPier是ProjectPier开源的一个团队管理系统。 Project Pier 0.8.8及之前版本存在安全漏洞,该漏洞源于tools/upload_file.php未验证文件类型或身份验证,可能导致任意文件上传和远程代码执行。
漏洞信息
N/A
漏洞
N/A