CVE-2019-11612: Improper Limitation of a Pathname to a Restricted Directory

doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary files...