← All advisories

High severity7.5NVD Advisory· Published Sep 17, 2018· Updated Jun 17, 2026

CVE-2018-17125

CVE-2018-17125

Description

CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php.

Affected products

1

Cscms/Cscmsllm-fuzzy
Range: = 4.1

Patches

Vulnerability mechanics

References

2

github.com/AvaterXXX/CScms/blob/master/CScms_dirdel.mdnvdExploitThird Party Advisory
www.patec.cn/newsshow.phpnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.