| 제목 | GitHub hfly 1.0 Arbitrary file reading |
|---|
| 설명 | Arbitrary file read vulnerability refers to the ability of an attacker to bypass application restrictions and read arbitrary file contents on the server, including sensitive configurations, account passwords, keys, etc. Such vulnerabilities usually stem from the lack of strict verification of user input.The filename parameter of the download interface on the vulnerable site can be used to download any file. |
|---|
| 원천 | ⚠️ https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/PHP-based%20travel%20website-CMS/PHP-based%20travel%20website-CMS%20download%20filename%20Arbitrary%20file%20reading.md |
|---|
| 사용자 | webray.com.cn (UID 24778) |
|---|
| 제출 | 2025. 11. 28. AM 04:14 (9 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 11. AM 08:00 (13 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 335859 [baowzh hfly 까지 638ff9abe9078bc977c132b37acbe1900b63491c download filename 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|