Gửi #702483: MuYuCMS 2.7 CWE-22: Improper Limitation of a Pathname to a Restricted Directthông tin

tiêu đềMuYuCMS 2.7 CWE-22: Improper Limitation of a Pathname to a Restricted Direct
Mô tảA directory traversal vulnerability exists in MuYuCMS version 2.7 within the accessory management module. The vulnerability is located in the picdel method of Accessory.php, where the 'picdelur' parameter is used to construct file paths for deletion without proper sanitization.
Nguồn⚠️ https://gist.github.com/b1uel0n3/48ec32d52e1533df88465c9c834536bb
Người dùng
 b1uel0n3 (UID 93016)
Đệ trình27/11/2025 04:58 (cách đây 10 các tháng)
Kiểm duyệt16/12/2025 14:18 (19 days later)
Trạng tháiBản sao
Mục VulDB224187 [MuYuCMS 2.2 /accessory/picdel.html Từ chối dịch vụ]
điểm0

Want to stay up to date on a daily basis?

Enable the mail alert feature now!