exploitDog

CVE-2018-18257

Опубликовано: 11 окт. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 6.4

EPSS Низкий

Описание

An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI.

Ссылки

https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_2.pdf
Exploit
Third Party Advisory
https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_2.pdf
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bagesoft:bagecms:3.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00336

Низкий

7.5 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-6pjp-chrp-qx34

CVSS3: 7.5

github

больше 3 лет назад

An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI.

EPSS

Процентиль: 56%

0.00336

Низкий

7.5 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22