CVE-2021-34129 | BDVDB-2026-155506 Detail

Description#

LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/bettershop/LaikeTui/issues/9

Exploit#

No public exploit known

History#

Version 12021-06-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.