← All advisories

High severity7.2NVD Advisory· Published Sep 1, 2018· Updated Jun 17, 2026

CVE-2018-16320

CVE-2018-16320

Description

idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.

Affected products

2

Idreamsoft/Icmsinferred2 versions
<=7.0.11+ 1 more
- (no CPE)range: <=7.0.11
- (no CPE)range: =7.0.11

Patches

Vulnerability mechanics

References

1

github.com/idreamsoft/iCMS/issues/41nvdIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.