Skip to content
OpenAdvisories

Archive

1 July 2015

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2014-1836 Public exploit

    ImpressCMS Path Traversal to Arbitrary File Delete

    Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.