Remote File Deletion Vulnerability in Monstra CMS 3.0.4

Remote File Deletion Vulnerability in Monstra CMS 3.0.4

CVE-2018-9038 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:P/A:P

Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uploads/ request.

Learn more about our Cms Pen Testing.