Unrated

Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitr...

CVE-2018-6022 First seen on SecPulse Jan 23, 2018

Original description The description as published by the source.

Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging back-office access to provide a ..\ in the param.path parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report blackwolfsec.cc

Key facts

Severity: Unrated
Published: Jan 23, 2018
First seen on SecPulse: Jan 23, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:49