POJIA破甲
地图 / Unrestricted File Upload at ██████████

Unrestricted File Upload at ██████████

代码执行 / 危险文件上传 / #2357778

厂商
Mars
严重程度
高危 · CVSS 9.3
赏金
—
弱点
危险文件上传
研究员
@xplo1t
披露日期
2024-02-19
资产
*.myroyalcanin.gr
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @xplo1t · 版权归作者与 Mars 所有

同类报告

Unrestricted file upload leads to Stored XSSVisma Public · — · $250Unrestricted File Upload on https://partner.tiktokshop.com/wsos_v2/oec_partner/uploadTikTok · 2023-04-12Tricking the "Create snippet" feature into displaying the wrong filetype can lead to RCE on Slack usersSlack · 2020-06-30 · $1,500Unrestricted file upload when creating quotes allows for Stored XSSVisma Public · — · $250[Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal JolokiaAiven Ltd · 2022-11-08 · $5,000No validation to Image upload user can upload ( php APK zip files and can be used as storage purpose)Linktree · 2022-09-15 · $750