Submit #654065: MuYuCMS 2.7 Read, modify, and create any files after authentication and execinfo

TitleMuYuCMS 2.7 Read, modify, and create any files after authentication and exec
Description/editor/index.php? a=get_file The interface allows for arbitrary file reading /editor/index.php?a=create_node allows any empty file can be created through directory traversal by this interface /editor/index.php?a=save_file Allow modification of any file through directory traversal and the file_key obtained from the above interface
Source⚠️ https://gitee.com/MuYuCMS/MuYuCMS/issues/ICXVMH
User
 Eurekya (UID 85631)
Submission09/14/2025 10:07 (10 months ago)
Moderation09/25/2025 20:07 (11 days later)
StatusDuplicate
VulDB entry221735 [MuYuCMS 2.2 index.php file_path path traversal]
Points0

Do you know our Splunk app?

Download it now for free!