| タイトル | https://github.com/GreenCMS/GreenCMS Greencms V2.3 Arbitrary File Removal |
|---|
| 説明 | GreenCMS v2.3 contains a critical vulnerability enabling arbitrary file deletion. The flaw stems from the /DATAController.class.php file's zipFiles parameter failing to rigorously validate user-input file paths. Attackers can intercept POST requests targeting the index.php?m=admin&c=data&a=delzipfiles page using Burp Suite, then tamper with the zipFiles parameter to force cross-directory path manipulation. By creating a test.txt file in the parent directory of CUSTOM_20251220_d57a8099f8b1cf14be55b2758a06def4.zip and submitting the modified data packet, attackers can bypass backend filtering to delete files across directories. This vulnerability allows malicious actors to delete critical resources like configuration files and database backups, potentially causing website downtime, data breaches, and other severe consequences with extensive impact. |
|---|
| ソース | ⚠️ https://github.com/ueh1013/VULN/issues/5 |
|---|
| ユーザー | Blackooo (UID 93743) |
|---|
| 送信 | 2025年12月26日 09:20 (10 月 ago) |
|---|
| モデレーション | 2025年12月28日 11:24 (2 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 338572 [GreenCMS 迄 2.3 File DataController.class.php sqlFiles/zipFiles ディレクトリトラバーサル] |
|---|
| ポイント | 0 |
|---|