| Título | xiaohe4966 TpMeCMS v1.3.3.1 Path Traversal |
|---|
| Descrição | TpMeCMS is an open-source backend framework based on PHP+Bootstrap, meticulously crafted for developers. It is built on two mainstream technologies, ThinkPHP and Bootstrap, and features a comprehensive permission management system and powerful functions such as one-click CRUD generation.
TpMeCMS is committed to improving development efficiency, reducing development costs, while ensuring the stability and security of the backend system. Open-source address: https://github.com/xiaohe4966/TpMeCMS/
TpMeCMS versions <= v1.3.3.1 have a vulnerability that allows arbitrary file reading, which can be exploited by attackers to obtain sensitive system information.
|
|---|
| Fonte | ⚠️ https://wiki.shikangsi.com/post/share/12da81ed-2dad-4a75-9b1a-db9afe1e7b7b |
|---|
| Utilizador | wiki (UID 72124) |
|---|
| Submissão | 08/09/2024 12h03 (há 2 anos) |
|---|
| Moderação | 15/09/2024 07h26 (7 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 277508 [xiaohe4966 TpMeCMS até 1.3.3.1 /index/ajax/lang Travessia de Diretório] |
|---|
| Pontos | 20 |
|---|