Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FlashChat Arbitrary File Upload RCE
Vulnerability Description
An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly validate file types and authentication, allowing attackers to upload malicious PHP scripts. Once uploaded, these scripts can be executed remotely, resulting in arbitrary code execution as the web server user.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
TUFaT FlashChat 安全漏洞
Vulnerability Description
TUFaT FlashChat是TUFaT公司的一个在线聊天系统脚本。 TUFaT FlashChat 6.0.2版本和6.0.4至6.0.8版本存在安全漏洞，该漏洞源于upload.php端点未验证文件类型和身份验证，可能导致任意文件上传和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A