CVE-2019-7234: Path Traversal

Published Jan 30, 2019

Updated

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.

Affected Software

1 affected component

idreamsoft iCMS=7.0.13

Event History

Jan 30, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-7234?

The severity of CVE-2019-7234 is critical with a CVSS score of 9.1.

What is the vulnerability in idreamsoft iCMS 7.0.13?

The vulnerability in idreamsoft iCMS 7.0.13 is directory traversal via admincp.php?app=apps&do=save.

How does the vulnerability in idreamsoft iCMS 7.0.13 work?

The vulnerability in idreamsoft iCMS 7.0.13 allows directory traversal by using _app=/../ in the admincp.php?app=apps&do=save URL, leading to the creation and download of a ZIP archive file with the contents of any directory.

How can I fix the vulnerability in idreamsoft iCMS 7.0.13?

To fix the vulnerability in idreamsoft iCMS 7.0.13, update to a version that has addressed the directory traversal issue.

Where can I find more information about CVE-2019-7234?

You can find more information about CVE-2019-7234 at the following link: https://github.com/idreamsoft/iCMS/issues/51