CVE-2020-17564

CRITICAL

FeiFeiCMS v4.0 - Path Traversal and Arbitrary File Deletion via Admin/DataAction.class.php

Title source: llm
STIX 2.1

Description

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
http://blog.51cto.com/12653365/2328557

Scores

CVSS v3 9.1
EPSS 0.0260
EPSS Percentile 83.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-22
Status published
Products (1)
feifeicms/feifeicms 4.0
Published Apr 22, 2021
Tracked Since Feb 18, 2026