| Package | Affected versions | Patched versions |
|---|---|---|
| u5cms | ≤ 3.9.3 |
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) .. (dot dot) or (2) full pathname in the f parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free