CVE-2020-18070 – Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders

5 years ago

Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the “do_del()” method of the component “database.admincp.php”.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18070

Reference (s):

https://github.com/idreamsoft/iCMS/issues/46