Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-1836

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wcj4-ff9m-5r7g

ImpressCMS Path Traversal to Arbitrary File Delete Absolute path traversal vulnerability in `htdocs/libraries/image-editor/image-edit.php` in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the `image_path` parameter in a cancel action.

gitlab/packagist/impresscms/impresscms/CVE-2014-1836

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.