Enviar #393376: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Downloadinformación

TítuloChengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Download
DescripciónIn the /admin/file_manager/export interface function, since there is no filtering mechanism, attackers can construct a directory traversal POC to download any file on the host.
Fuente⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE18-1.md
Usuario
 wanglun (UID 73616)
Sumisión2024-08-18 10:00 (hace 2 años)
Moderación2024-08-26 09:22 (8 days later)
EstadoAceptado
Entrada de VulDB275763 [Chengdu Everbrite Network Technology BeikeShop hasta 1.5.5 export exportZip path recorrido de directorios]
Puntos16

Do you know our Splunk app?

Download it now for free!