New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

File upload command execution #44

Closed

e0mlja opened this issue Nov 6, 2019 · 1 comment

e0mlja commented Nov 6, 2019

In the background, you can upload the PHP file by changing the image suffix to PHP, resulting in command execution.

url：http://192.168.18.143/admin/index.php?r=admin-user%2Fupdate-self

Owner

liufee commented Dec 24, 2019

thanks for the feedback.
it has been fix, see commit.
because yii2 FileValidator need custom assign value to attribute

liufee closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment