← All advisories

High severity7.5NVD Advisory· Published Feb 17, 2019· Updated Jun 17, 2026

CVE-2019-8411

CVE-2019-8411

Description

admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Yzmcms/Zzcmsinferred
Range: = 2018
Zzcms/Zzcms2 versions
cpe:2.3:a:zzcms:zzcms:2018:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zzcms:zzcms:2018:*:*:*:*:*:*:*
- (no CPE)range: 2018-10-19

Patches

Vulnerability mechanics

References

1

github.com/615/VulnPoC/issues/1nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.