CVE-2023-23136

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

Arbitrary file deletion

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2023-23136: Improper Limitation of a Pathname to a Restricted Directory

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

lmxcms path traversal vulnerability

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. There is a security vulnerability in lmxcms v1.41, which originated from the discovery of an arbitrary file deletion vulnerability via BackdbAction.class.php...

PT-2023-18854

Name of the Vulnerable Software and Affected Versions lmxcms version 1.41 Description The issue is related to an arbitrary file deletion vulnerability. It is exploited via the BackdbAction.class.php file. Recommendations For lmxcms version 1.41, consider restricting access to the...

CVE-2023-23136

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php...

CVE-2023-23136

The provided connected documents confirm a concrete vulnerability in lmxcms v1.41: an arbitrary file deletion issue exploitable via BackdbAction.class.php. The attack surface is the BackdbAction component, with impact described as high on integrity and availability while confidentiality remains u...