Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WebsiteBaker 2.13.3 Directory Traversal via Media Delete Endpoint
Vulnerability Description
WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters. Attackers can send crafted GET requests to /admin/media/delete.php with directory traversal sequences to delete files outside the intended directory.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
websitebaker 安全漏洞
Vulnerability Description
websitebaker是个人开发者的一个基于PHP的内容管理系统。它的特点包括基于模板的前台界面，分页支持, 多用户管理等。 WebsiteBaker 2.13.3版本存在安全漏洞，该漏洞源于目录遍历漏洞，可能导致认证攻击者删除任意文件。
CVSS Information
N/A
Vulnerability Type
N/A