Invia #254117: Stupid-Simple-CMS Stupid-Simple-CMS <=1.2.4 Unauthorized file deletioninformazioni

TitoloStupid-Simple-CMS Stupid-Simple-CMS <=1.2.4 Unauthorized file deletion
DescrizioneThe code audit found that there is no authentication measure for the file deletion interface, which can cause arbitrary file deletion.
Fonte⚠️ https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20deletion.md
Utente
 ggbot (UID 59864)
Sottomissione17/12/2023 09:29 (3 anni fa)
Moderazione17/12/2023 09:35 (7 minutes later)
StatoAccettato
Voce VulDB248269 [codelyfe Stupid Simple CMS fino a 1.2.4 Deletion Interface /file-manager/delete.php File autenticazione debole]
Punti15

Interested in the pricing of exploits?

See the underground prices here!