Skip to content
OpenAdvisories

Product · liukuo362573

YiShaAdmin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2022-51022

    YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint

    YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send craf…

    liukuo362573 YiShaAdmin