RKCMS path traversal vulnerability

Ranko RkCms is an open source, free enterprise website presentation system from Ranko, China. a security vulnerability exists in RKCMS, which stems from a directory traversal vulnerability in the filename parameter of pathindex.php. No detailed vulnerability details are available...

PT-2021-11200

Name of the Vulnerable Software and Affected Versions: RKCMS version master Description: A vulnerability was discovered in the filename parameter in the "/api/v1/login" is not present, however "pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg"...

CVE-2020-25881: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg of the master version of RKCMS. This vulnerability allows for an attacker to perform a directory traversal via a crafted .txt file...