CVE-2021-34129

PoC —

CVSS 3.1

8.1 high

EPSS

2%p77

Published

Jun 15, 2021 (Jun 15, 2021)

Modified

Jun 17, 2026

Description

LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter.

Vendors: laiketui
Products: laiketui
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.