medium4.9
CVE-2018-7172
In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.
Impact
In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wondercms | Wondercms | through 2.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://foreversong.cn/archives/1070
- https://github.com/robiso/wondercms/commit/64efdc4fd974c83cedd221b46e7c3854a81650ec
- https://www.wondercms.com/whatsnew
- http://foreversong.cn/archives/1070
- https://github.com/robiso/wondercms/commit/64efdc4fd974c83cedd221b46e7c3854a81650ec
- https://www.wondercms.com/whatsnew