| Название | https://github.com/GreenCMS/GreenCMS Greencms V2.3 Arbitrary File Removal |
|---|
| Описание | GreenCMS v2.3 contains a critical vulnerability enabling arbitrary file deletion. The flaw stems from the /DATAController.class.php file's zipFiles parameter failing to rigorously validate user-input file paths. Attackers can intercept POST requests targeting the index.php?m=admin&c=data&a=delzipfiles page using Burp Suite, then tamper with the zipFiles parameter to force cross-directory path manipulation. By creating a test.txt file in the parent directory of CUSTOM_20251220_d57a8099f8b1cf14be55b2758a06def4.zip and submitting the modified data packet, attackers can bypass backend filtering to delete files across directories. This vulnerability allows malicious actors to delete critical resources like configuration files and database backups, potentially causing website downtime, data breaches, and other severe consequences with extensive impact. |
|---|
| Источник | ⚠️ https://github.com/ueh1013/VULN/issues/5 |
|---|
| Пользователь | Blackooo (UID 93743) |
|---|
| Представление | 26.12.2025 09:20 (10 месяцы назад) |
|---|
| Модерация | 28.12.2025 11:24 (2 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 338572 [GreenCMS до 2.3 File DataController.class.php sqlFiles/zipFiles обход каталога] |
|---|
| Баллы | 0 |
|---|