| Titre | 299Ko 299ko V2.0.0 Delete any file |
|---|
| Description | The root of the vulnerability lies within the getSentDir() and delete() method in the plugin/filemanager/controllers/FileManagerAPIController.php file,users can delete any file on the server. |
|---|
| La source | ⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb010.md |
|---|
| Utilisateur | Yu Bao (UID 88956) |
|---|
| Soumission | 26/08/2025 03:56 (il y a 9 mois) |
|---|
| Modérer | 10/09/2025 15:37 (15 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 323501 [299ko jusqu’à 2.0.0 FileManagerAPIController.php getSentDir/delete directory traversal] |
|---|
| Points | 17 |
|---|