CVE-2019-7235: Path Traversal
Published Jan 30, 2019
·Updated
An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
Affected Software
1 affected component
idreamsoft iCMS=7.0.13
Event History
Jan 30, 2019
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2019-7235.
2
What is the severity of CVE-2019-7235?
The severity of CVE-2019-7235 is high (7.5).
3
How does CVE-2019-7235 affect idreamsoft iCMS?
CVE-2019-7235 allows directory traversal in idreamsoft iCMS 7.0.13.
4
What is the CWE (Common Weakness Enumeration) for CVE-2019-7235?
The CWE for CVE-2019-7235 is CWE-22.
5
Is there a fix for CVE-2019-7235?
A fix for CVE-2019-7235 may be available from idreamsoft.