CVE-2019-7160

CVE-2019-7160 affects idreamsoft iCMS 7.0.13. The vulnerability is a Directory Traversal in which an attacker can reach admincp.php?app=files with the udir parameter and files.admincp.php, enabling arbitrary PHP code execution from a ZIP file passed via admincp.php?app=apps with the zipfile param...