WeiPHP Path Traversal Vulnerability Allowing Arbitrary File Read

A path traversal vulnerability has been identified in WeiPHP version 5.0, a development framework for WeChat public accounts created by Shenzhen Yuanmengyun Technology Co., Ltd. The vulnerability arises in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint. Due to inadequate input validation, unauthenticated remote attackers can exploit this flaw by sending crafted POST requests that perform directory traversal. This exploitation allows for arbitrary file reading on the server, potentially disclosing sensitive information such as configuration files and source code.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, including configuration files and source code, which could be misused for further attacks or to compromise the application.