Submit #393374: Chengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Deletioninfo

TitleChengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Deletion
DescriptionWhen sending a DELETE request action to the admin/file_manager/files interface, an attacker can construct a special POC to implement an arbitrary file deletion attack.
Source⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE4-1.md
User
 wanglun (UID 73616)
Submission08/18/2024 09:58 (2 years ago)
Moderation08/26/2024 09:22 (8 days later)
StatusAccepted
VulDB entry275761 [Chengdu Everbrite Network Technology BeikeShop up to 1.5.5 files destroyFiles path traversal]
Points16

Want to stay up to date on a daily basis?

Enable the mail alert feature now!