Path Traversal in Vendor Multi-Image Endpoint: Directory Creation, File Upload and Deletion

github.com 2026-07-05查看中文 →

Security AdvisoryCriticalkirilkirkov/Ecommerce-CodeIgniter-Bootstrap

Affected:

kirilkirkov/Ecommerce-CodeIgniter-Bootstrap all versions

Fixed in:

2a9497f

Referenced CVEs: CVE-2026-14635 · 7.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Radare2 r_str_append Signed Integer Overflow Vulnerability (CVE-2023-XXXX) Fix 2026-07-06 Fix signed length overflow in radare2 r_str_append/r_str_prepend 2026-07-06 Fix 2-byte OOB Read in radare2 RBinJava Line Number Table Parser 2026-07-06 Radare2 r_bin_java LineNumberTable Out-of-bounds Read Fix 2026-07-06 Radare2 Use-after-free in pde disassembly path (r_core_disasm_pde) with PoC 2026-07-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive