CVE-2018-15818 Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| reputeinfosystems repute arforms | <= 3.5.1 | No fix listed |
| wordpress arforms(WordPress) | < 3.5.2 | 3.5.2 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org