Unscored CVE-2018-16141 EUVD-2018-7996GHSA-mjm2-8vwx-pq95

ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via a…

Published Aug 30, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter with a ..\ sequence. A member user can delete any file on a Windows server.

References

https://unothing.github.io/posts/thinkcmfx223/