SeaCMS Arbitrary File Read Vulnerability in admin_safe.php

An arbitrary file read vulnerability has been identified in SeaCMS version 13.3. The issue arises in the admin_safe.php file, where the file_get_contents function is used without adequate validation of input parameters. This flaw allows attackers to read arbitrary files from the server.

Impact

Exploitation of this vulnerability allows for arbitrary file read, which could lead to the disclosure of sensitive information, such as password files or application configuration files.

Reproduction

To reproduce this vulnerability, send a request to admin_safe.php with the action parameter set to 'download' and the file parameter set to the path of the file to be read. The server will respond with the contents of the specified file, bypassing any intended access controls.