| 标题 | MuYuCMS 2.7 Directory Traversal |
|---|
| 描述 | A critical directory traversal vulnerability exists in MuYuCMS version 2.7 within the file management component of the accessory management module. The vulnerability is located in the filesdel method of Accessory.php (application/admin/controller/Accessory.php), where the 'filedelur' parameter is used to construct file deletion paths without proper sanitization. The application directly concatenates user-supplied input with base directory paths and passes it to file deletion functions, allowing authenticated attackers to inject directory traversal sequences (e.g., "../") and delete arbitrary files outside the intended upload directory. Successful exploitation can lead to complete system compromise through denial of service by removing critical system files or privilege escalation by deleting security-related configuration files. |
|---|
| 来源 | ⚠️ https://gist.github.com/b1uel0n3/bc45f5318cf8c60667ee5d39f5e2885e |
|---|
| 用户 | b1uel0n3 (UID 93016) |
|---|
| 提交 | 2025-11-27 05時32分 (10 月前) |
|---|
| 管理 | 2025-12-16 14時18分 (19 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 221804 [MuYuCMS 2.2 filesdel.html filedelur 目录遍历] |
|---|
| 积分 | 0 |
|---|