Arbitrary File Deletion Vulnerability in YUNUCMS 1.1.5

CVE-2018-19181 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:P

statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file.

Learn more about our Cms Pen Testing.