ShopEx vulnerability in distribution file deletion and repair

Brief description: white hats go all over the world. Xia Yi always pays attention to it.

Details: This vulnerability also exists in the template management office .. You can create a url where the template can be deleted to delete any file, including the whole site deletion ..

The vulnerability is constructed as follows: the vulnerability can be ../to delete the whole site. The vulnerability exists in other shopex systems, such as the ease of opening a shop...

 

Solution: restrict the path ..