Maian Gallery authenticated admin upload PHP webshell RCE

Admin login then cmd=addimages thumb upload writes picN-cat.php under content/galleries///. """Maian Gallery admin thumbnail upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...

Yoga Class Registration System Cross-site Request Forgery Vulnerability

Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A cross-site request forgery vulnerability exists in Yoga Class Registration System version 1.0, which stems from the application failing to properly validate class thumbnails uploaded by an...