| タイトル | Seacms v11.6 has Delete any file in the foreground |
|---|
| 説明 | Seacms v11.6 has Delete any file in the foreground.
Website source address: https://github.com/seacms-net/CMS
Register and log in at the foreground, and then capture the package where the picture is uploaded.
Capture the package and then there is oldpic at the bottom of the package, which indicates the path under the root directory of the project, the default is uploads/user/a.png, modify it to the file path under the root directory and then delete any file |
|---|
| ソース | ⚠️ https://github.com/xryj920/CVE/blob/main/DEL.md |
|---|
| ユーザー | DRXYJ (UID 46872) |
|---|
| 送信 | 2023年05月17日 06:09 (3 年 ago) |
|---|
| モデレーション | 2023年05月27日 09:30 (10 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 230081 [SeaCMS 11.6 Picture Upload member.php oldpic サービス拒否] |
|---|
| ポイント | 20 |
|---|