high7.5
CVE-2019-9662
An issue was discovered in JTBC(PHP) 3.0.1.8.
Impact
An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jtbc | Jtbc Php | Version 3.0.1.8 |