CVE-2024-28265

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2024-11-01

Last modified

2024-11-06

Weaknesses

CWE-459

Affected products

• Ibos (Ibos)

References

• https://gitee.com/ibos/IBOS
• https://github.com/A7cc/cve/issues/1