CVE-2016-15038

NUUO NVRmini 2 (up to 3.0.8) has a path traversal vulnerability in an unknown function of /deletefile.php. Manipulating the filename parameter enables traversal, and remote access is possible. The vulnerability is documented with public exploit references in the provided sources; no remediation d...