CVE:CVE-2023-36159
CNNVD:CNNVD-202308-244
Lost and Found Information System是oretnom23个人开发者的一个失物招领信息系统。
Lost and Found Information System 1.0 版本存在安全漏洞，该漏洞源于通过 Create User 页面上的 First Name 和 Last Name 字段可以运行任意代码。
solution:Upgrade lost_and_found_information_system_project lost_and_found_information_system to a higher version than 1.0,and avoid the version 1.0