Lucene search
HistoryJun 07, 2023 - 2:15 a.m.
CVE-2023-33604
imperial cms v7.5
arbitrary file deletion
delsprefile function
post request
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
44.4%
Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request.
Affected configurations
Node
imperial_cms_projectimperial_cmsMatch7.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| imperial_cms_project | imperial_cms | 7.5 | cpe:2.3:a:imperial_cms_project:imperial_cms:7.5:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-33604
2023-06-07 00:00:00
prion
prion
Arbitrary file deletion
2023-06-07 02:15:00
cve
cve
CVE-2023-33604
2023-06-07 02:15:15
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
44.4%
Related for NVD:CVE-2023-33604