CVE-2014-1836 ImpressCMS Path Traversal to Arbitrary File Delete
MediumCVSS 6.4
EPSS 3.6%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| impresscms/impresscms(Packagist) | < 1.3.6 | 1.3.6 |
| impresscms/impresscms | <= 1.3.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- github.com exploit
- web.archive.org
- community.impresscms.org vendor-advisory
- 20140203 [CVE-2014-1836] Arbitrary file deletion in ImpressCMS < 1.3.6 and two XSS issues mailing-list
- github.com
- 102770 vdb-entry
- 65279 vdb-entry