| Título | lingmeng oa_system 1.0 Download any file |
|---|
| Descripción | In this system, the parameter startpath.replace allows executable file downloads, allowing attackers to obtain important information about the website builder. I think this problem is very serious and causes serious information leakage. |
|---|
| Fuente | ⚠️ https://github.com/misstt123/oasys/issues/10 |
|---|
| Usuario | lingmeng (UID 83892) |
|---|
| Sumisión | 2025-04-08 10:46 (hace 1 Año) |
|---|
| Moderación | 2025-04-16 03:21 (8 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 304975 [misstt123 oasys 1.0 /show image recorrido de directorios] |
|---|
| Puntos | 16 |
|---|