New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

File upload command execution #44

Closed

e0mlja opened this issue Nov 6, 2019 · 1 comment

e0mlja commented Nov 6, 2019

In the background, you can upload the PHP file by changing the image suffix to PHP, resulting in command execution.

url：http://192.168.18.143/admin/index.php?r=admin-user%2Fupdate-self

Owner

liufee commented Dec 24, 2019

thanks for the feedback.
it has been fix, see commit.
because yii2 FileValidator need custom assign value to attribute

liufee closed this as completed

# for free to join this conversation on GitHub. Already have an account? # to comment