Path Traversal Vulnerability in CmsEasy 7.7.7.9 via deleteimg_action Function
A path traversal vulnerability exists in CmsEasy version 7.7.7.9 within the deleteimg_action function of the lib/admin/image_admin.php library. The vulnerability allows remote attackers to manipulate the imgname argument, potentially enabling unauthorized file system access. This security issue has been publicly disclosed, and there is a possibility that the exploit could be used. Despite early notification, the vendor did not provide any response to address the vulnerability.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
* cmseasy |
||
cmseasy cmseasy 7.7.7.9 |
Vulmon