CVE-2020-20290 – Directory traversal vulnerability in the yccms 3.3 project. The delete, d

Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions’ improper judgment of the request parameters, triggers a directory traversal vulnerability.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20290

Reference (s):

• https://blog.jiguang.xyz/posts/yccms-directory-traversal-vulnerability-report/