Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mecha CMS 安全漏洞
Vulnerability Description
Mecha CMS是Mecha开源的一个面向极简主义者的平面文件内容管理系统。 Mecha CMS 3.0.0版本存在安全漏洞，该漏洞源于容易受到目录遍历攻击。攻击者可以构建绕过用户身份检查的cookie和URI，然后通过POST方法传递参数，从而导致删除任意文件或接管网站。
CVSS Information
N/A
Vulnerability Type
N/A