[0day-rubbish] Maian Pal 2.1 product image upload with no extension allow-list to PHP webshell and www-data uid 33 code execution (7.2, PR:H)
Maian Pal 2.1 image uploads lack an extension allow-list, enabling PHP code execution.
1 stories, newest first · one card per story
Maian Pal 2.1 image uploads lack an extension allow-list, enabling PHP code execution.
Today 1.6K readers · 2.5K views · 780 reads · all time 189K views