Medium severity6.5NVD Advisory· Published Sep 30, 2018· Updated Jun 17, 2026
CVE-2018-17797
CVE-2018-17797
Description
An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- github.com/seedis/zzcms/blob/master/arbitrary_file_deletion1.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.