CVE-2023-27701

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

Arbitrary file deletion

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

CVE-2023-27700

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

Arbitrary file deletion

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

CVE-2023-27701

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

CVE-2023-27701: Missing Authorization

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

CVE-2023-27700: Improper Limitation of a Pathname to a Restricted Directory

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

CVE-2023-27701

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

PT-2023-21298 · Muyucms · Muyucms

Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the component /database/sqldel.html. Recommendations: For MuYuCMS version 2.2, as a temporary workaroun...

CVE-2023-27701

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

PT-2023-21297 · Muyucms · Muyucms

Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: The issue is related to an arbitrary file deletion vulnerability. It can be exploited via the component /accessory/picdel.html. Recommendations: For MuYuCMS version 2.2, as a temporary workaround, consider...

CVE-2023-27700

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

CVE-2023-27700

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

CVE-2023-27700

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...

MuYuCMS path traversal vulnerability

MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS version 2.2 security vulnerability exists , the vulnerability stems from the /accessory/picdel.html component found to contain arbitrary file deletion vulnerability...

CVE-2023-27700

CVE-2023-27700 affects MuYuCMS v2.2, with an arbitrary file deletion vulnerability exposed via the /accessory/picdel.html component. The issue’s impact is described as high (I/H, A/H) with CVSS‑3.1 base score 8.1, attack vector Network, low attack complexity, privileges required Low, no user inte...

MuYuCMS security vulnerabilities

MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS version 2.2 security vulnerabilities , the vulnerability stems from the /database/sqldel.html found to contain arbitrary file deletion vulnerability...

CVE-2023-27701

CVE-2023-27701 affects MuYuCMS v2.2 via the /database/sqldel.html component, enabling arbitrary file deletion. The root cause is not detailed beyond the vulnerability being linked to that endpoint, and no official patch/version fix is provided in the connected documents. The CVE’s basic metrics i...

CVE-2023-1043

A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the file /editor/index.php. The manipulation of the argument dirpath leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2023-1046

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed ...