Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BageCMS 路径遍历漏洞
Vulnerability Description
BageCMS是一套基于PHP和MySQL的跨平台的内容管理系统（CMS）。 BageCMS 3.1.3版本中存在目录遍历漏洞。攻击者可借助index.php?r=admini/template/batch&command=deleteFile&fileName=或index.php?r=admini/template/batch&command=deleteFolder&folderName=../ URI利用该漏洞删除Web服务器上的任意文件和文件夹。
CVSS Information
N/A
Vulnerability Type
N/A