CVE-2018-6022

Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging back-office access to provide a ..\ in the param.path parameter...

PT-2018-17305

Name of the Vulnerable Software and Affected Versions NoneCms versions prior to 1.3.0 Description The issue allows remote authenticated users to delete arbitrary files by providing a .. in the param.path parameter, leveraging back-office access. This is a directory traversal vulnerability in the...