| عنوان | Seacms v11.6 has Delete any file in the foreground |
|---|
| الوصف | Seacms v11.6 has Delete any file in the foreground.
Website source address: https://github.com/seacms-net/CMS
Register and log in at the foreground, and then capture the package where the picture is uploaded.
Capture the package and then there is oldpic at the bottom of the package, which indicates the path under the root directory of the project, the default is uploads/user/a.png, modify it to the file path under the root directory and then delete any file |
|---|
| المصدر | ⚠️ https://github.com/xryj920/CVE/blob/main/DEL.md |
|---|
| المستخدم | DRXYJ (UID 46872) |
|---|
| ارسال | 17/05/2023 06:09 AM (3 سنوات منذ) |
|---|
| الاعتدال | 27/05/2023 09:30 AM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 230081 [SeaCMS 11.6 Picture Upload member.php oldpic الحرمان من الخدمة] |
|---|
| النقاط | 20 |
|---|