ProjectSend 漏洞列表

ProjectSend 是一款用于文件共享和管理的开源应用程序。该漏洞存在于 ProjectSend r1605 版本中，由于缺乏适当的授权检查，攻击者可以执行敏感操作，例如启用用户注册和自动验证，或向上传文件的允许扩展名白名单中添加新条目。这最终可能导致攻击者在服务器上执行任意 PHP 代码。

An improper authorization check was identified within ProjectSend version r1605 that allows an attacker to perform sensitive actions such as enabling user registration and auto validation, or adding new entries in the whitelist of allowed extensions for uploaded files. Ultimately, this allows to execute arbitrary PHP code on the server hosting the application.

An improper authorization check was identified within ProjectSend version r1605 that allows an attacker to perform sensitive actions such as enabling user registration and auto validation, or adding new entries in the whitelist of allowed extensions for uploaded files. Ultimately, this allows to execute arbitrary PHP code on the server hosting the application.

Detects exposed ProjectSend installation page.

ProjectSend是一套基于PHP和MySQL的自托管应用程序。