Soumettre #402346: 10Web CMS <=1.0 Path Equivalence: 'fakedir/../realdir/filename'information

Titre10Web CMS <=1.0 Path Equivalence: 'fakedir/../realdir/filename'
DescriptionThe JFinalCMS system /admin/template/edit interface has a security problem for reading arbitrary files
La source⚠️ https://github.com/xingjiuW/cve/blob/main/wh.md
Utilisateur
 xinjiuW (UID 74456)
Soumission04/09/2024 10:14 (il y a 2 ans)
Modérer11/09/2024 18:28 (7 days later)
StatutAccepté
Entrée VulDB277215 [JFinalCMS jusqu’à 20240903 com.cms.util.TemplateUtils /admin/template/update fileName directory traversal]
Points14

◂ PrécédentAperçuSuivant ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!