Non évaluée

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code...

CVE-2019-17490 Première détection SecPulse Oct 11, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a .php filename but the image/png content type) to the web/polygon/problem/tests URI.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

report github.com

Faits clés

Gravité: Non évaluée
Publication: Oct 11, 2019
Première détection SecPulse: Oct 11, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50