CVE-2025-65879

Warehouse Management System 1.2 is vulnerable to an authenticated arbitrary file deletion flaw. The /goods/deleteGoods endpoint fails to validate the user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delete(). An authenticated atta...