CVE-2025-10232: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in 299ko up to 2.0.0. Affected by this issue is the function getSentDir/delete of the file plugin/filemanager/controllers/FileManagerAPIController.php. Executing manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has...

299Ko 路径遍历漏洞

299Ko is a simple, fast and lightweight content management system from 299Ko open source. 299Ko 2.0.0 and previous versions of path traversal vulnerability , the vulnerability stems from the file plugin/filemanager/controllers/FileManagerAPIController.php function getSentDir/delete the wrong...