1. Home
  2. CVE Database
  3. CVE-2018-9331
HIGH · 7.5

CVE-2018-9331

An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database acces...

Vulnerability Description

An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database access by deleting install.lock.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
ZzcmsZzcms8.2

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2018-9331?

CVE-2018-9331 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database acces...

How severe is CVE-2018-9331?

CVE-2018-9331 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-9331?

Check the references section above for vendor advisories and patch information. Affected products include: Zzcms Zzcms.