Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64107
HistoryAug 19, 2023 - 12:00 a.m.

Online Travel Agency System artical.php File Upload Vulnerability

2023-08-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
online travel agency
file upload
vulnerability
validation
execution
arbitrary code
malicious file
artical.php

EPSS

0.002

Percentile

65.4%

Online Travel Agency System is an online travel agency system. A file upload vulnerability exists in Online Travel Agency System v1.0, which stems from a lack of validation of uploaded files in the artical.php file. The vulnerability can be exploited to remotely execute arbitrary code by uploading a malicious file.

EPSS

0.002

Percentile

65.4%

Related for CNVD-2023-64107