CVE-2018-20128

An issue was discovered in UsualToolCMS v8.0

published December 13, 2018

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pathname followed by a crafted substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01545 · 74.6th percentile
Published
2018-12-13T08:00Z
EPSS history
Timeline
  • 13 DEC 08:00Z
    An issue was discovered in UsualToolCMS v8.0
    cvelistv5