high7.5
CVE-2018-17125
CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php.
Impact
CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chshcms | Cscms | Version 4.1 |