Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
qdPM 代码问题漏洞
Vulnerability Description
qdPM是一款基于Web的开源项目管理工具。 qdPM 9.1版本中存在安全漏洞。攻击者可通过上传恶意的.php文件利用该漏洞在服务器上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A