Thinkcmfx

thinkcmfx

Vendor: Thinkcmf • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-16141

1Thinkcmf

1Thinkcmfx

Nov 21, 2024

Aug 30, 2018

N/A· v4

6.5 MEDIUM· v3

5.5 MEDIUM· v2

ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter with a ..\ sequence. A member user can delete any file on a Wi...Show more