Security Advisory

CVE-2017-8868

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-10 05:14:00
Last updated 2024-08-05 16:48:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.