Submit #254117: Stupid-Simple-CMS Stupid-Simple-CMS <=1.2.4 Unauthorized file deletioninfo

TitelStupid-Simple-CMS Stupid-Simple-CMS <=1.2.4 Unauthorized file deletion
BeschreibungThe code audit found that there is no authentication measure for the file deletion interface, which can cause arbitrary file deletion.
Quelle⚠️ https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20deletion.md
Benutzer
 ggbot (UID 59864)
Einreichung17.12.2023 09:29 (vor 3 Jahren)
Moderieren17.12.2023 09:35 (7 minutes later)
StatusAkzeptiert
VulDB Eintrag248269 [codelyfe Stupid Simple CMS bis 1.2.4 Deletion Interface /file-manager/delete.php Datei schwache Authentisierung]
Punkte15

Interested in the pricing of exploits?

See the underground prices here!