提交 #94471: The muyucms bug can list files in a directory via dir_list and dir_path parameters
| 标题 | The muyucms bug can list files in a directory via dir_list and dir_path parameters |
|---|---|
| 描述 | After we log in, we can set the dir_list and dir_path parameters to a specific directory and then use this loophole to see all the filenames in that directory. |
| 来源 | ⚠️ https:/ |
| 用户 | kaga_cve (UID 41588) |
| 提交 | 2023-02-25 07時20分 (3 年前) |
| 管理 | 2023-02-26 13時20分 (1 day later) |
| 状态 | 已接受 |
| VulDB条目 | 221802 [MuYuCMS 2.2 /editor/index.php dir_path 目录遍历] |
| 积分 | 20 |