SourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester House Rental and Property Listing System 1.0. Affected is an unknown function of the file btn_functions.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235074 is the identifier assigned to this vulnerability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

危险类型文件的不加限制上传

House Rental and Property Listing 代码问题漏洞

House Rental and Property Listing是一个由PHP、JavaScript、Bootstrap、CSS 和 MySQL（数据库） 开发的一套系统。可方便用户找到合适的出租房屋或房产。 SourceCodester House Rental and Property Listing System 1.0版本存在代码问题漏洞，该漏洞源于文件 btn_functions.php 存在未知函数，导致上传不受限制。

N/A

N/A