| tiêu đề | light0011 cms f72cf46f601efb2a0618c3814cc2f61380b38930 File and Directory Information Exposure |
|---|
| Mô tả | `Public/Home/js/uploadify/check-exists.php:9-15` and `Public/Admin/js/uploadify/check-exists.php:9-15` append an untrusted `POST filename` to `$_SERVER['DOCUMENT_ROOT'] . '/uploads/'` and disclose the result of `file_exists()` as `1` or `0`. No canonicalization or traversal rejection occurs. Where the expected `uploads` directory exists, an unauthenticated request such as `filename=../../../../etc/passwd` escapes the intended directory and reveals the existence of arbitrary server paths, aiding filesystem reconnaissance.
|
|---|
| Nguồn | ⚠️ https://github.com/light0011/cms/issues/15 |
|---|
| Người dùng | gscsd (UID 97914) |
|---|
| Đệ trình | 30/09/2026 17:52 (cách đây 19 ngày) |
|---|
| Kiểm duyệt | 18/10/2026 09:37 (18 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 421675 [light0011 cms Uploadify check-exists.php file_exists filename tiết lộ thông tin] |
|---|
| điểm | 20 |
|---|