CVE-2023-33604 - Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php

Back Back to CVE browser

CRITICAL

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php

Published Jun 7, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 0.80%

Description

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37760
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/257484
Third Party AdvisoryVDB Entry
https://www.mubucm.com/doc/38rCUPucWz
Broken Link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37760		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/257484		Third Party AdvisoryVDB Entry
https://www.mubucm.com/doc/38rCUPucWz		Broken Link