| Название | MuYuCMS 2.7 CWE-22: Improper Limitation of a Pathname to a Restricted Direct |
|---|
| Описание | A directory traversal vulnerability exists in MuYuCMS version 2.7 within the accessory management module. The vulnerability is located in the picdel method of Accessory.php, where the 'picdelur' parameter is used to construct file paths for deletion without proper sanitization. |
|---|
| Источник | ⚠️ https://gist.github.com/b1uel0n3/48ec32d52e1533df88465c9c834536bb |
|---|
| Пользователь | b1uel0n3 (UID 93016) |
|---|
| Представление | 27.11.2025 04:58 (10 месяцы назад) |
|---|
| Модерация | 16.12.2025 14:18 (19 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 224187 [MuYuCMS 2.2 /accessory/picdel.html отказ в обслуживании] |
|---|
| Баллы | 0 |
|---|