Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitrary files and (potentially) access the supporting database, delete arbitrary files, access user passwords, or run arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProjectSend 代码问题漏洞
Vulnerability Description
ProjectSend（前称cFTP）是一套基于PHP和MySQL的自托管应用程序。 ProjectSend r1053版本中的upload-process-form.php文件存在安全漏洞。攻击者可利用该漏洞读取任意文件，可能访问所支持的数据库，删除任意文件，访问用户密码或运行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A