joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.

Published Oct 4, 2019 · Updated Aug 5, 2024 · Assigned by mitre