CVE-2018-19329

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an…

published November 17, 2018

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01774 · 78.0th percentile
Published
2018-11-17T15:00Z
EPSS history
Timeline
  • 17 NOV 15:00Z
    GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an…
    cvelistv5