mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-07 21:46:40 +02:00
709 B
709 B
CVE-2018-19181
Description
statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file.
POC
Reference
Github
No PoCs found on GitHub currently.