提出 #654065: MuYuCMS 2.7 Read, modify, and create any files after authentication and exec情報

タイトルMuYuCMS 2.7 Read, modify, and create any files after authentication and exec
説明/editor/index.php? a=get_file The interface allows for arbitrary file reading /editor/index.php?a=create_node allows any empty file can be created through directory traversal by this interface /editor/index.php?a=save_file Allow modification of any file through directory traversal and the file_key obtained from the above interface
ソース⚠️ https://gitee.com/MuYuCMS/MuYuCMS/issues/ICXVMH
ユーザー
 Eurekya (UID 85631)
送信2025年09月14日 10:07 (11 月 ago)
モデレーション2025年09月25日 20:07 (11 days later)
ステータス重複
VulDBエントリ221735 [MuYuCMS 2.2 index.php file_path ディレクトリトラバーサル]
ポイント0

Want to stay up to date on a daily basis?

Enable the mail alert feature now!