critical9.1
CVE-2020-18070
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the comp…
Impact
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idreamsoft | Icms | Version 7.0.13 |