PT-2019-18477

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.13 Description An issue was discovered in idreamsoft iCMS, where the editor/editor.admincp.php file allows directory traversal via the dir parameter in the "app=editor&do=fileManager" API endpoint. Recommendations F...