CVE-2020-25873

2021-10-2920:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the “id” parameter.

CPENameOperatorVersion
baijiacmsv4eqV4.1.4

CPE	Name	Operator	Version
	baijiacmsv4	eq	V4.1.4

References

github.com/baijiacms/baijiacmsV4/issues/6