← All advisories

Medium severity4.9OSV Advisory· Published Feb 27, 2018· Updated Jun 17, 2026

CVE-2018-7172

CVE-2018-7172

Description

In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Robiso/WondercmsOSV
Range: 1.1.0-beta, 1.2.0-beta, 2.0.0, …
WonderCMS/Wondercms2 versions
cpe:2.3:a:wondercms:wondercms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wondercms:wondercms:*:*:*:*:*:*:*:*range: <=2.4.0
- (no CPE)range: <2.4.1

Patches

Vulnerability mechanics

References

3

github.com/robiso/wondercms/commit/64efdc4fd974c83cedd221b46e7c3854a81650ecnvdPatchThird Party Advisory
foreversong.cn/archives/1070nvdThird Party Advisory
www.wondercms.com/whatsnewnvdVendor Advisory

News mentions

0

No linked articles in our index yet.