PT-2018-13906

Name of the Vulnerable Software and Affected Versions CScms version 4.1 Description The issue allows for arbitrary directory deletion. This can be achieved by using a specific substring dir=.. in requests to the "pluginssysadminPlugins.php" endpoint. Recommendations For CScms version 4.1, conside...