Path traversal

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component...

CVE-2020-17564: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component...

PT-2021-10107

Name of the Vulnerable Software and Affected Versions: FeiFeiCMS version 4.0 Description: The issue allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the "Admin/DataAction.class.php" component. This is a result of a Path Traversal weakness. Recommendations: Fo...