medium4.3
CVE-2020-21590
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.
Impact
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhicms | Wuzhicms | Version 4.1.0 |