CVE-2018-15818 Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
Published
HighCVSS 7.5
EPSS 2.0%
An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php.