exploitDog

CVE-2018-16819

Опубликовано: 18 сент. 2018

Источник: nvd

CVSS3: 4.9

CVSS2: 5.5

EPSS Низкий

Описание

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests.

Ссылки

http://blog.51cto.com/13770310/2173956
Exploit
Third Party Advisory
https://github.com/monstra-cms/monstra/issues/456
Exploit
Issue Tracking
Third Party Advisory
http://blog.51cto.com/13770310/2173956
Exploit
Third Party Advisory
https://github.com/monstra-cms/monstra/issues/456
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:monstra:monstra:3.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00451

Низкий

4.9 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-r67r-xjc2-mffm

CVSS3: 4.9

github

больше 3 лет назад

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests.

EPSS

Процентиль: 63%

0.00451

Низкий

4.9 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-22