CVE-2025-9395 wangsongyan wblog backup.go RestorePost server-side request forgery

A vulnerability was identified in wangsongyan wblog 0.0.1. This affects the function RestorePost of the file backup.go. Such manipulation of the argument fileName leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be use...

wblog 代码问题漏洞

wblog is an application by OnTheRoad Personal Developer. A code issue vulnerability exists in wblog version 0.0.1, which stems from an incorrect manipulation of the parameter fileName by the RestorePost function in the backup.go file, resulting in a server-side request forgery...

Path Traversal

github.com/go-sonic/sonic is vulnerable to Path Traversal. The vulnerability exists because the BackupWholeSite function of backup.go does not properly sanitize the file path in the toBackupPath parameter, allowing an attacker to access files outside the expected directory...