Security Advisory
CVE-2018-19181
7.5
HIGH
Vulnerability Description
statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file.
Published Date
November 11, 2018
Official Source
NIST NVD Advisory