CVE-2026-92532
2026-10-07
11h17 +00:00
11h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server. A successful exploit could allow arbitrary code execution with the privileges of the account used by the web service.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Unrestricted Upload of File with Dangerous Type The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
