search

Self-Evident / OneFileCMS

A single file cms - all in one file!
http://onefilecms.com/
165 stars 57 forks source link

onefilecms.php in OneFileCMS through 2017-10-09 might allow attackers to delete anyfile or folders they want on the delete screen #49

Open havysec opened 6 years ago

havysec commented 6 years ago

access http://fragrant:30001/OneFileCMS/onefilecms.php by username/password

image

access http://fragrant:30001/OneFileCMS/onefilecms.php?i=var/www/html/&f=123.php&p=edit&p=deletefile

image

Click Delete File(s)

image