Security Advisory

CVE-2018-18626

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-23 19:00:00

Last updated 2024-09-16 20:57:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter.

← Browse all CVEs View on cve.org ↗