mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
1.1 KiB
1.1 KiB
CVE-2026-0643
projectworlds House Rental and Property Listing Signup register.php unrestricted upload
Description
A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the file /app/register.php?action=reg of the component Signup. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.