← Back to CVE List

CVE-2018-18257

Published: 2018-10-11T21:01Z
Last Modified: 2024-11-21T03:55Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt