| عنوان | MuYuCMS 2.7 Directory Traversal |
|---|
| الوصف | A critical directory traversal vulnerability exists in MuYuCMS version 2.7 within the file management component of the accessory management module. The vulnerability is located in the filesdel method of Accessory.php (application/admin/controller/Accessory.php), where the 'filedelur' parameter is used to construct file deletion paths without proper sanitization. The application directly concatenates user-supplied input with base directory paths and passes it to file deletion functions, allowing authenticated attackers to inject directory traversal sequences (e.g., "../") and delete arbitrary files outside the intended upload directory. Successful exploitation can lead to complete system compromise through denial of service by removing critical system files or privilege escalation by deleting security-related configuration files. |
|---|
| المصدر | ⚠️ https://gist.github.com/b1uel0n3/bc45f5318cf8c60667ee5d39f5e2885e |
|---|
| المستخدم | b1uel0n3 (UID 93016) |
|---|
| ارسال | 27/11/2025 05:32 AM (10 أشهر منذ) |
|---|
| الاعتدال | 16/12/2025 02:18 PM (19 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 221804 [MuYuCMS 2.2 filesdel.html filedelur اجتياز الدليل] |
|---|
| النقاط | 0 |
|---|