Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability is a path traversal that leads to arbitrary file deletion, requiring administrator privileges. The root cause is a two-stage process. First, the vulnerability is introduced in modules/comment/admin/edit.php, where the attach parameter from a POST request is not properly sanitized. An attacker can provide a path traversal payload which is then stored in the database. The fixing commit 27ba63c32eea2782837b1464a930baf75f0b4d29 confirms this by adding the nv_is_file validation check. Second, the exploit is triggered when the comment is deleted. The del.php script retrieves the malicious path from the database and passes it to the nv_deletefile function. This function, as described in the vulnerability details, has insufficient validation and proceeds to delete the file at the specified path, leading to arbitrary file deletion within the application's root directory. Therefore, the code in edit.php is the vulnerable entry point, and nv_deletefile is the function that performs the malicious action.
modules/comment/admin/edit.phpmodules/comment/admin/edit.php
nv_deletefileUnknown
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nukeviet/nukeviet | composer | < 4.6.00 | 4.6.00 |