إرسال #393376: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Downloadالمعلومات

عنوانChengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Download
الوصفIn the /admin/file_manager/export interface function, since there is no filtering mechanism, attackers can construct a directory traversal POC to download any file on the host.
المصدر⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE18-1.md
المستخدم
 wanglun (UID 73616)
ارسال18/08/2024 10:00 AM (2 سنوات منذ)
الاعتدال26/08/2024 09:22 AM (8 days later)
الحالةتمت الموافقة
إدخال VulDB275763 [Chengdu Everbrite Network Technology BeikeShop حتى 1.5.5 export exportZip path اجتياز الدليل]
النقاط16

Do you want to use VulDB in your project?

Use the official API to access entries easily!