CVE-2018-7172

In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal.

Score

CVSS 3.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2018-02-27

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Wondercms (Wondercms)

References

• http://foreversong.cn/archives/1070
• https://github.com/robiso/wondercms/commit/64efdc4fd974c83cedd221b46e7c3854a81650ec
• https://www.wondercms.com/whatsnew