CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?acti...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com