Submeter #641567: 299Ko 299ko V2.0.0 Delete any fileinformação

Título299Ko 299ko V2.0.0 Delete any file
DescriçãoThe root of the vulnerability lies within the getSentDir() and delete() method in the plugin/filemanager/controllers/FileManagerAPIController.php file,users can delete any file on the server.
Fonte⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb010.md
Utilizador
 Yu Bao (UID 88956)
Submissão26/08/2025 03h56 (há 10 meses)
Moderação10/09/2025 15h37 (15 days later)
EstadoAceite
Entrada VulDB323501 [299ko até 2.0.0 FileManagerAPIController.php getSentDir/delete Travessia de Diretório]
Pontos17

Want to know what is going to be exploited?

We predict KEV entries!