Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29396
HistoryApr 07, 2023 - 12:00 a.m.

Online Computer and Laptop Store Arbitrary File Upload Vulnerability

2023-04-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
online computer and laptop store
arbitrary file upload
vulnerability
lack of validation
remote code execution
php-ocls.

EPSS

0.01

Percentile

84.0%

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero’s personal developer. Online Computer and Laptop Store v1.0 is vulnerable to arbitrary file uploads. The vulnerability stems from a lack of validation of uploaded files in the php-ocls\admin\system_info\index.php parameter img, which could be exploited to upload malicious files and remotely execute arbitrary code remotely.

EPSS

0.01

Percentile

84.0%