| 标题 | https://github.com/GreenCMS/GreenCMS Greencms V2.3 Arbitrary File Removal |
|---|
| 描述 | GreenCMS v2.3 contains a critical vulnerability enabling arbitrary file deletion. The flaw stems from the /DATAController.class.php file's zipFiles parameter failing to rigorously validate user-input file paths. Attackers can intercept POST requests targeting the index.php?m=admin&c=data&a=delzipfiles page using Burp Suite, then tamper with the zipFiles parameter to force cross-directory path manipulation. By creating a test.txt file in the parent directory of CUSTOM_20251220_d57a8099f8b1cf14be55b2758a06def4.zip and submitting the modified data packet, attackers can bypass backend filtering to delete files across directories. This vulnerability allows malicious actors to delete critical resources like configuration files and database backups, potentially causing website downtime, data breaches, and other severe consequences with extensive impact. |
|---|
| 来源 | ⚠️ https://github.com/ueh1013/VULN/issues/5 |
|---|
| 用户 | Blackooo (UID 93743) |
|---|
| 提交 | 2025-12-26 09時20分 (10 月前) |
|---|
| 管理 | 2025-12-28 11時24分 (2 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 338572 [GreenCMS 直到 2.3 File DataController.class.php sqlFiles/zipFiles 目录遍历] |
|---|
| 积分 | 0 |
|---|