| Titre | https://github.com/megagao/production_ssm production_ssm v1.0 Arbitrary file deletion vulnerability |
|---|
| Description | The production_ssm system contains an arbitrary file deletion vulnerability.The /pic/delete interface of the roduction_ssm system contains an arbitrary file deletion vulnerability.The system does not filter directory traversal characters when detecting file paths, allowing attackers to traverse paths and delete arbitrary files using the "..\" operator. |
|---|
| La source | ⚠️ https://github.com/megagao/production_ssm/issues/38 |
|---|
| Utilisateur | Jszdk (UID 95030) |
|---|
| Soumission | 09/02/2026 09:31 (il y a 3 mois) |
|---|
| Modérer | 20/02/2026 15:17 (11 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 347103 [feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete picName directory traversal] |
|---|
| Points | 19 |
|---|