Submit #254122: Stupid-Simple-CMS Stupid-Simple-CMS <=1.2.4 Unauthorized file overwriteinfo

TitelStupid-Simple-CMS Stupid-Simple-CMS <=1.2.4 Unauthorized file overwrite
BeschreibungThe code audit found that the file renaming interface has no authentication measures, which can lead to arbitrary file overwriting.
Quelle⚠️ https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20overwrite.md
Benutzer
 ggbot (UID 59864)
Einreichung17.12.2023 09:58 (vor 3 Jahren)
Moderieren21.12.2023 09:44 (4 days later)
StatusAkzeptiert
VulDB Eintrag248690 [codelyfe Stupid Simple CMS bis 1.2.4 /file-manager/rename.php newName]
Punkte15

Do you want to use VulDB in your project?

Use the official API to access entries easily!