CVE-2014-1836

Published July 1st, 2015

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.

pedrib/PoC

Advisories, proof of concept files and exploits that have been made public by @pedrib.

GitHub

858