CVE-2025-65879

Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOADPATH and passed to File.delete without validation. A remote...

CVE-2025-65879

Warehouse Management System 1.2 is vulnerable to an authenticated arbitrary file deletion flaw. The /goods/deleteGoods endpoint fails to validate the user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delete(). An authenticated atta...