CVE-2018-16320: Path Traversal
Published Sep 1, 2018
·Updated
idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file.
Affected Software
1 affected component
idreamsoft iCMS=7.0.11
Event History
Sep 1, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-16320?
CVE-2018-16320 refers to a vulnerability in idreamsoft iCMS 7.0.11 that allows directory traversal, potentially resulting in the execution of arbitrary PHP code from a ZIP file.
2
How severe is CVE-2018-16320?
The severity of CVE-2018-16320 is high, with a severity score of 7.2.
3
What software versions are affected by CVE-2018-16320?
idreamsoft iCMS version 7.0.11 is affected by CVE-2018-16320.
4
How can I fix CVE-2018-16320?
To fix CVE-2018-16320, it is recommended to update idreamsoft iCMS to a version that addresses the vulnerability.
5
Where can I find more information about CVE-2018-16320?
You can find more information about CVE-2018-16320 on the GitHub issue page: https://github.com/idreamsoft/iCMS/issues/41