Security Advisory

CVE-2019-7160

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-29 16:00:00

Last updated 2024-08-04 20:38:33

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PHP code from a ZIP file via the admincp.php?app=apps zipfile parameter to apps.admincp.php.

← Browse all CVEs View on cve.org ↗