Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

There is two path traversal vulnerability #39

Closed
jayus0821 opened this issue Dec 23, 2020 · 0 comments
Closed

There is two path traversal vulnerability #39

jayus0821 opened this issue Dec 23, 2020 · 0 comments

Comments

@jayus0821
Copy link

jayus0821 commented Dec 23, 2020

post_edit and page_edit.php

line99
$index_file = '../mc-files/posts/index/'.$post_state.'.php';

line102
$index_file = '../mc-files/pages/index/'.$post_state.'.php';

post_state is controllable and there is no filtering limit

We can use ../ to loop through all files
88a5306d01343e66ddebd3ae435f0e2

@bg5sbk bg5sbk closed this as completed in f8fc729 Jul 19, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant