Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 10/04/2018 Updated: 03/10/2019

CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 555

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:P

Monstra CMS 3.0.4 allows remote malicious users to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uploads/ request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
monstra monstra 3.0.4

# Exploit Title: Monstra CMS 304 allows remote attackers to delete folder via an get request # Date: 2018-03-26 # Exploit Author: Wenming Jiang # Vendor Homepage: githubcom/monstra-cms/monstra # Software Link: githubcom/monstra-cms/monstra # Version: 304 # Tested on: macos 10126, php 56, apache2229 # CVE :CVE-2018-9038 ...

Monstra CMS version 304 suffers from an arbitrary folder deletion vulnerability ...

CWE-22 https://github.com/monstra-cms/monstra/issues/434 https://www.exploit-db.com/exploits/44512/https://nvd.nist.gov https://www.exploit-db.com/exploits/44512/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-9038

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect