Description
acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk might be limited to requests submitted through CSRF.
Unscored
CVE-2017-8868
EUVD-2017-17810GHSA-xq4m-r2r3-54jq
acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp/acp.php. The risk …
Published May 10, 2017 · Updated Aug 5, 2024 · Assigned by mitre