| 제목 | https://github.com/GreenCMS/GreenCMS Greencms V2.3 Arbitrary File Removal |
|---|
| 설명 | GreenCMS v2.3 contains a critical vulnerability enabling arbitrary file deletion. The flaw stems from the /DATAController.class.php file's zipFiles parameter failing to rigorously validate user-input file paths. Attackers can intercept POST requests targeting the index.php?m=admin&c=data&a=delzipfiles page using Burp Suite, then tamper with the zipFiles parameter to force cross-directory path manipulation. By creating a test.txt file in the parent directory of CUSTOM_20251220_d57a8099f8b1cf14be55b2758a06def4.zip and submitting the modified data packet, attackers can bypass backend filtering to delete files across directories. This vulnerability allows malicious actors to delete critical resources like configuration files and database backups, potentially causing website downtime, data breaches, and other severe consequences with extensive impact. |
|---|
| 원천 | ⚠️ https://github.com/ueh1013/VULN/issues/5 |
|---|
| 사용자 | Blackooo (UID 93743) |
|---|
| 제출 | 2025. 12. 26. AM 09:20 (10 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 28. AM 11:24 (2 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 338572 [GreenCMS 까지 2.3 File DataController.class.php sqlFiles/zipFiles 디렉토리 순회] |
|---|
| 포인트들 | 0 |
|---|