TuziCMS has an arbitrary file deletion vulnerability

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. TuziCMS suffers from an arbitrary file deletion vulnerability. The vulnerability is due to the system parameters are not user-submitted data filtering or processing , allowing attackers to exploit the...