| 标题 | Seacms v11.6 has Delete any file in the foreground |
|---|
| 描述 | Seacms v11.6 has Delete any file in the foreground.
Website source address: https://github.com/seacms-net/CMS
Register and log in at the foreground, and then capture the package where the picture is uploaded.
Capture the package and then there is oldpic at the bottom of the package, which indicates the path under the root directory of the project, the default is uploads/user/a.png, modify it to the file path under the root directory and then delete any file |
|---|
| 来源 | ⚠️ https://github.com/xryj920/CVE/blob/main/DEL.md |
|---|
| 用户 | DRXYJ (UID 46872) |
|---|
| 提交 | 2023-05-17 06時09分 (3 年前) |
|---|
| 管理 | 2023-05-27 09時30分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 230081 [SeaCMS 11.6 Picture Upload member.php oldpic 拒绝服务] |
|---|
| 积分 | 20 |
|---|