Arbitrary file download vulnerability in EasyAdmin /application/index/controller/index.php page

EasyAdmin is a free and open source community program based on the LayUI template, with a ThinkPHP5 framework for backend support. An arbitrary file download vulnerability exists in the EasyAdmin /application/index/controller/index.php page. An attacker can download system configuration files by...

easyadmin v1.0.5 comment.php has an arbitrary file upload vulnerability

EAdmin Minimalist Community is a free and open source, fast and simple community program that was created to quickly build a community and communication platform. easyadmin v1.0.5 comment.php has an arbitrary file upload vulnerability. The vulnerability occurs because the data submitted by visito...