Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. (dot dot) in the file parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microweber ‘file’参数目录遍历漏洞
Vulnerability Description
Microweber是美国Microweber社区的一套可提供拖拽功能的网上商店管理系统。该系统包括添加商品、图片等模块。 Microweber 0.830之前版本的userfiles/modules/admin/backup/delete.php脚本存在目录遍历漏洞。远程攻击者可借助文件参数中的目录遍历字符(‘..’)利用该漏洞删除任意文件。
CVSS Information
N/A
Vulnerability Type
N/A