VYPR
← All advisories
Medium severity4.9OSV Advisory· Published Nov 17, 2018· Updated Jun 17, 2026

CVE-2018-19329

CVE-2018-19329

Description

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Greencms/GreencmsOSV2 versions
    v2.3.0101, v2.3.0215, v2.3.0603+ 1 more
    • (no CPE)range: v2.3.0101, v2.3.0215, v2.3.0603
    • (no CPE)range: =2.3.0603

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.