CVE-2024-27489: High severity wmcms vulnerability
Published Jul 19, 2024
·Updated
An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
Affected Software
1 affected component
WMCMS WMCMS
Event History
Jul 19, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-27489?
CVE-2024-27489 has a high severity due to its ability to allow attackers to delete arbitrary files.
2
How do I fix CVE-2024-27489?
To fix CVE-2024-27489, you should apply the latest patch provided by WMCMS or restrict file deletion capabilities in the DelFile() function.
3
What versions of WMCMS are affected by CVE-2024-27489?
CVE-2024-27489 affects WMCMS version 4.4.
4
Can CVE-2024-27489 be exploited remotely?
Yes, CVE-2024-27489 can be exploited remotely through a crafted POST request.
5
What impact does CVE-2024-27489 have on system security?
CVE-2024-27489 can lead to unauthorized file deletion, compromising the integrity and availability of the system.