Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Project Pier <= 0.8.8 Arbitrary File Upload RCE
Vulnerability Description
Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php. The upload handler fails to validate the file type or enforce authentication, allowing remote attackers to upload malicious PHP files directly into a web-accessible directory. The uploaded file is stored with a predictable suffix and can be executed by requesting its URL, resulting in remote code execution.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
ProjectPier 安全漏洞
Vulnerability Description
ProjectPier是ProjectPier开源的一个团队管理系统。 Project Pier 0.8.8及之前版本存在安全漏洞，该漏洞源于tools/upload_file.php未验证文件类型或身份验证，可能导致任意文件上传和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A