漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
itsourcecode University Management System Avatar File st_update.php unrestricted upload
Vulnerability Description
A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /st_update.php of the component Avatar File Handler. The manipulation of the argument personal_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272080.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
University Management System 代码问题漏洞
Vulnerability Description
University Management System是一个大学管理系统。 University Management System 1.0版本存在代码问题漏洞,该漏洞源于对参数personal_image的错误操作会导致文件上传不受限制。
CVSS Information
N/A
Vulnerability Type
N/A