FoxCMS Directory Traversal Vulnerability in DataBackup.php Restores Method

A directory traversal vulnerability has been identified in FoxCMS version 2.0.6, specifically within the restores method of the DataBackup.php file. This issue allows attackers to manipulate the idList parameter to access arbitrary files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files, such as system configuration files or credentials.

Reproduction

To reproduce this vulnerability, send a JSON request payload to the restores method endpoint, including the idList parameter with a crafted value that traverses directories, such as '../../../../../../etc/passwd'. The server response will include the contents of the requested file, demonstrating the successful exploitation of the directory traversal issue.