| 标题 | givanz Vvveb 1.0.7.3 Path traversal |
|---|
| 描述 | Vvveb CMS version x.x.x.x contains an authenticated arbitrary file disclosure vulnerability in the code editor functionality. An authenticated administrator can read arbitrary files by manipulating the file parameter in the loadFile action. |
|---|
| 来源 | ⚠️ https://github.com/givanz/Vvveb/issues/333 |
|---|
| 用户 | Huu1j (UID 91525) |
|---|
| 提交 | 2025-10-11 06時15分 (12 月前) |
|---|
| 管理 | 2025-10-25 08時27分 (14 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 329873 [givanz Vvveb 直到 1.0.7.3 Code Editor system/functions.php sanitizeFileName file 目录遍历] |
|---|
| 积分 | 17 |
|---|