提交 #749983: Zentao PMS <=21.7.8 Arbitrary File Deletion

Affected Component: backup/control.php::delete()
Vulnerability Type: Path Traversal leading to Arbitrary File Deletion
Authentication Required: Yes
Impact: Arbitrary file deletion on the server filesystem
Reporter: ez-lbz

• 来源: ⚠️ https://github.com/ez-lbz/ez-lbz.github.io/issues/10
• 用户: ez-lbz (UID 87033)
• 提交: 2026-02-01 10時56分 (3 月前)
• 管理: 2026-02-15 17時20分 (14 days later)
• 状态: 已接受
• VulDB条目: 346160 [ZenTao 直到 21.7.8 Backup editor/control.php delete fileName 目录遍历]
• 积分: 17