Security Advisory

CVE-2018-9331

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-04-07 02:00:00

Last updated 2024-08-05 07:17:52

Assigner mitre

State PUBLISHED

Description

An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database access by deleting install.lock.

← Browse all CVEs View on cve.org ↗