提交 #94477: MuYucms has Arbitrary file deletion vulnerability via filedelur parameters

We put a txt file in the root of our website with the file name test.txt. and we can Construct specific packets after logging into the backend, then we can delete the file.

• 来源: ⚠️ https://github.com/MuYuCMS/MuYuCMS/issues/6
• 用户: kaga_cve (UID 41588)
• 提交: 2023-02-25 07時33分 (4 年前)
• 管理: 2023-02-26 13時20分 (1 day later)
• 状态: 已接受
• VulDB条目: 221804 [MuYuCMS 2.2 filesdel.html filedelur 目录遍历]
• 积分: 20