An issue exists in pcmt superMicro-CMS version 3.11, allows malicious users to delete files via crafted image file in images.php.
supermicro-cms project supermicro-cms 3.11