Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\file_controller.php.
References
Link | Resource |
---|---|
https://github.com/Verytops/verydows/issues/20 | Exploit Third Party Advisory |
https://github.com/zhendezuile/bug_report/blob/main/bug_c | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-04-26 14:15
Updated : 2022-05-04 12:47
NVD link : CVE-2022-28058
Mitre link : CVE-2022-28058
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
verydows
- verydows