Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via the filenames parameter to /admin/system/database/filedown.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
米拓MetInfo 路径遍历漏洞
Vulnerability Description
MetInfo是中国米拓信息技术有限公司的一套使用PHP和Mysql开发的内容管理系统（CMS）。 米拓MetInfo 5.3.17版本中存在目录遍历漏洞。远程攻击者可通过向/admin/system/database/filedown.php文件发送‘filenames’参数利用该漏洞删除任意的.zip文件。
CVSS Information
N/A
Vulnerability Type
N/A