Skip to content
OpenAdvisories
Unscored CVE-2020-25873 EUVD-2020-18505GHSA-gq3v-pwqp-vfrw

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows atta…

Published Oct 29, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter.

References