CVE-2018-20128
CVE-2018-20128
An issue was discovered in UsualToolCMS v8.0. cmsadmin\a_sqlback.php allows remote attackers to delete arbitrary files via a backname[] directory-traversal pathname followed by a crafted substring.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →