JTBCPHP 3.0.1.8 allows Arbitrary File Upload via the console//console/file/manage.php?type=list URI, as demonstrated by a .php file...
7.5CVSS7.1AI score0.01184EPSS
SaveExploits1References1
OSV•added 2018/10/01 8:29 a.m.•4 views
CVE-2018-17837
An issue was discovered in JTBCPHP 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring...
