You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When the system is successfully installed, the system will generate the install.lock file in the /data/ directory. When the user wants to reinstall, it will first determine whether the install.lock file exists. If it exists, the installation cannot be repeated, but we can find one To delete any file, delete the install.lock file, you can directly reinstall the system.
The parameters $uploadImg, $oldpic, and $imgurl are all controllable:
Vulnerability recurrence: first log in to the background to access the link : http://your domain /open/app/LKT//index.php?module=Article,and then
publish an article.
Then modify the article:
Before proceeding with any file deletion, visit the install directory:
Replace parameters and delete any files:
Visit the install directory again and find that arbitrary file deletion has been implemented, which leads to reinstallation vulnerabilities.
When the system is successfully installed, the system will generate the install.lock file in the /data/ directory. When the user wants to reinstall, it will first determine whether the install.lock file exists. If it exists, the installation cannot be repeated, but we can find one To delete any file, delete the install.lock file, you can directly reinstall the system.
The parameters $uploadImg, $oldpic, and $imgurl are all controllable:
Vulnerability recurrence: first log in to the background to access the link :
http://your domain /open/app/LKT//index.php?module=Article,and then
publish an article.
Then modify the article:
Before proceeding with any file deletion, visit the install directory:
Replace parameters and delete any files:
Visit the install directory again and find that arbitrary file deletion has been implemented, which leads to reinstallation vulnerabilities.
The text was updated successfully, but these errors were encountered: