UsualToolCMS Arbitrary File Deletion Vulnerability

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. An arbitrary file deletion vulnerability exists in the cmsadmin\asqlback.php file in UTCMS version 8.0, which can be exploited by remote attackers to delete arbitrary files with the help of the 'backname...

CVE-2018-20128

An issue was discovered in UsualToolCMS v8.0. cmsadmin\asqlback.php allows remote attackers to delete arbitrary files via a backname directory-traversal pathname followed by a crafted substring...