CVE-2022-28058

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...

CVE-2022-28058

CVE-2022-28058 affects Verydows v2.0 and enables arbitrary file deletion via the path backend\file_controller.php. The NVD entry reports CVSSv3.1 impact: Confidentiality NONE, Integrity HIGH, Availability HIGH (base score 8.1); exposure via NETWORK with low attack complexity, no user interaction ...

CVE-2022-28058: Improper Limitation of a Pathname to a Restricted Directory

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...