CVE-2020-18070: Path Traversal
Published Apr 29, 2021
·Updated
Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "dodel()" method of the component "database.admincp.php".
Affected Software
1 affected component
idreamsoft iCMS=7.0.13
Event History
Apr 29, 2021
CVE Published
via MITRE·11:28 PM
Data Sourced
via MITRE·11:28 PM
Description
Frequently Asked Questions
1
What is CVE-2020-18070?
CVE-2020-18070 is a path traversal vulnerability in iCMS v7.0.13.
2
How does CVE-2020-18070 work?
CVE-2020-18070 allows remote attackers to delete folders by injecting commands into a crafted HTTP request.
3
What is the severity of CVE-2020-18070?
CVE-2020-18070 has a severity rating of 9.1, which is considered critical.
4
How can I fix CVE-2020-18070?
To fix CVE-2020-18070, update iCMS to version 7.0.14 or higher.
5
Where can I find more information about CVE-2020-18070?
You can find more information about CVE-2020-18070 at the following link: [https://github.com/idreamsoft/iCMS/issues/46](https://github.com/idreamsoft/iCMS/issues/46)