CVE-2020-17563

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del="...

CVE-2020-17563

FeiFeiCMS v4.0 is affected by a path traversal vulnerability that allows remote attackers to delete arbitrary files by sending a crafted HTTP request to /index.php?s=/admin-tpl-del&id=. The issue is due to improper validation of the id parameter, enabling unauthorized file deletion. Impact is des...