Files
CVEs-PoC/2018/CVE-2018-19181.md
T
2024-06-18 02:51:15 +02:00

709 B

CVE-2018-19181

Description

statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file.

POC

Reference

Github

No PoCs found on GitHub currently.