CVE-2024-57170

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" parameter allows authenticated attackers to specify file paths containing directory traversal sequences (e.g., ../). This vulnerability enables attackers to delete arbitrary files outside the intended upload directory, potentially leading to denial of service or disruption of application functionality.

The following products are affected by CVE-2024-57170 vulnerability.

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-57170.

URL	Resource
https://themcsam.github.io/posts/so-planing-vulnerabilities/#arbitrary-file-deletion