CVE-2022-28527: Improper Limitation of a Pathname to a Restricted Directory

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...

PT-2022-19066

Name of the Vulnerable Software and Affected Versions dhcms version 20170919 Description The issue allows for arbitrary folder deletion via the /admin.php?r=admin/AdminBackup/del API endpoint. This could potentially lead to data loss or disruption of service. No information is provided about the...