| शीर्षक | code-projects Document Management System 1.0 Improper Input Validation |
|---|
| विवरण | A Path Traversal vulnerability (CWE-22) was discovered in the dell.php file of code-projects Document Management System 1.0.
The vulnerability exists because the application, when performing a file deletion operation, directly passes the which parameter from a GET request to the unlink() function without adequately validating or sanitizing the user-supplied path to confine it to the intended directory.
This allows a remote attacker to use path traversal sequences (e.g., ../) to construct a path to an arbitrary file on the server and delete it, provided the web server process has the necessary write permissions. Successful exploitation of this vulnerability could lead to the deletion of critical application files, configuration files, or system files, resulting in a Denial of Service (DoS) or more severe system damage. |
|---|
| स्रोत | ⚠️ https://github.com/i-Corner/cve/issues/14 |
|---|
| उपयोगकर्ता | iC0rner (UID 82839) |
|---|
| सबमिशन | 30/07/2025 09:22 AM (1 वर्ष पहले) |
|---|
| संयम | 31/07/2025 08:49 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 318461 [code-projects Document Management System 1.0 /dell.php unlink पहचान निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|