CVE-2017-10907

CVE-2017-10907 concerns a directory traversal in OneThird CMS Show Off prior to version 1.85. The JVN entries specify that an authenticated attacker with editing privileges can delete arbitrary files on the server, implying the vulnerability affects the Show Off component of OneThird CMS (Show Of...

CVE-2017-10907

Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...