FoxCMS Arbitrary File Deletion Vulnerability

An arbitrary file deletion vulnerability has been identified in FoxCMS version 1.2.5. The issue arises in the 'delRestoreSerie' method, where the application fails to properly sanitize the 'id' parameter. This lack of input validation allows for directory traversal, enabling the deletion of specified directories and their contents on the server.

Impact

Exploitation of this vulnerability allows for arbitrary file deletion on the server. If critical application directories are removed, it could lead to a complete denial-of-service condition for the application.

Reproduction

To reproduce this vulnerability, send a POST request to the '/admin/backup/delRestoreSerie' endpoint. Include a crafted 'id' parameter that traverses directories (using relative path manipulation) to reach a target directory, such as one within the web server's document root. The application will delete the specified directory and its contents recursively.