CVE-2020-18070

Publication date

2021-04-29 23:28:58

Family

mitre

State

PUBLISHED

Description

Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php".