CVE-2020-25873

2021-10-2920:15:07

Google

osv.dev

directory traversal

vulnerability

baijiacms v4

deletion

folders

server

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

25.9%

JSON

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the “id” parameter.

References

github.com/baijiacms/baijiacmsV4/issues/6