CVE-2018-17365

SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...

CVE-2018-17365

SeaCMS versions 6.64 and 7.2 expose an ARBITRARY FILE DELETION vulnerability exploitable via the filedir parameter. The root cause is improper handling of the filedir input, allowing remote attackers to delete files on the server. Impact is exposure of file deletion capability (integrity/availabi...