CVE

CVE-2018-20128

CVE-2018-20128

An issue was discovered in UsualToolCMS v8.0. cmsadmina_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pathname followed by a crafted substring.

Source: CVE-2018-20128

Exit mobile version