CVE-2017-11723

HIGH

Xinha 0.96 - Path Traversal via ImageManager deld Parameter

Title source: llm

Description

Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delete any folder via directory traversal sequences in the deld parameter.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_confirm

https://github.com/JojoCMS/Jojo-CMS/issues/30

Scores

CVSS v3 7.5

EPSS 0.0256

EPSS Percentile 83.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-22

Status published

Products (1)

xinha/xinha 0.96

Published Jul 29, 2017

Tracked Since Feb 18, 2026