Arbitrary file deletion

acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF...

CVE-2017-8868

The CVE-2017-8868 vulnerability affects flatCore 1.4.7, where acp/core/files.browser.php enables deletion of files via directory traversal in the delete parameter to acp/acp.php. The underlying issue is a directory-traversal flaw that can impact files reachable through that parameter. The NVD ent...