CVE-2018-16446: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...

SeaCMS Arbitrary File Deletion Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in the file adm1n/admindatabase.php in SeaCMS 6.61 and earlier versions. The vulnerability can be exploited to...