| Titolo | 299Ko 299ko V2.0.0 Delete any file |
|---|
| Descrizione | The root of the vulnerability lies within the getSentDir() and delete() method in the plugin/filemanager/controllers/FileManagerAPIController.php file,users can delete any file on the server. |
|---|
| Fonte | ⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb010.md |
|---|
| Utente | Yu Bao (UID 88956) |
|---|
| Sottomissione | 26/08/2025 03:56 (11 mesi fa) |
|---|
| Moderazione | 10/09/2025 15:37 (15 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 323501 [299ko fino a 2.0.0 FileManagerAPIController.php getSentDir/delete directory traversal] |
|---|
| Punti | 17 |
|---|