New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Download && Delete Anything at /admin/controllers/database.php #16

Open

R4ilgun opened this issue Feb 7, 2020 · 0 comments

R4ilgun commented Feb 7, 2020 •

edited

Loading

                                                        HongCMS

                    0x01 Delete&&download Anything(Admin Privilege)

/admin/controllers/database

There is a ajax() which can delete or download anything.

The ForceStringFrom() is to receive get or post from user，if we get action is delete and filename is test.txt(default path is /system/backup):

Delete successfully.
We can delete anthing:

                                 0x02 Download Anything(Admin Privilege)

Just modify the param we get.

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment