| Package | Affected versions | Patched versions |
|---|---|---|
| mopcms | ≤ 2018-11-30 |
A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding directory is deleted, as demonstrated by ./ to delete the entire web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free