Submit #392202: FastAdmin < V1.3.4.20220530 Path Traversalinfo

TitleFastAdmin < V1.3.4.20220530 Path Traversal
DescriptionFastAdmin 是一款基于PHP+Bootstrap的开源后台框架,专为开发者精心打造。它基于ThinkPHP和Bootstrap两大主流技术构建,拥有完善的权限管理系统和一键生成CRUD等强大功能。FastAdmin致力于提高开发效率,降低开发成本,同时确保后台系统的稳定性和安全性。 FastAdmin < V1.3.4.20220530的版本均存在任意文件读取漏洞,攻击者利用此漏洞可以获取系统敏感信息。
Source⚠️ https://wiki.shikangsi.com/post/share/da0292b8-0f92-4e6e-bdb7-73f47b901acd
User
 wiki (UID 72124)
Submission08/16/2024 04:37 (2 years ago)
Moderation08/19/2024 15:52 (3 days later)
StatusAccepted
VulDB entry275114 [FastAdmin up to 1.3.3.20220121 /index/ajax/lang path traversal]
Points20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!