What is CVE-2018-16344?

CVE-2018-16344 is a high-severity vulnerability in Zzcms, classified under Path Traversal. CVSS score: 7.5/10. Published 2018-09-02.

How severe is CVE-2018-16344?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Zzcms

CVE-2018-16344

An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Zzcms — versions 8.3
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-16344?: CVE-2018-16344 is a high-severity vulnerability in Zzcms, classified under Path Traversal. CVSS score: 7.5/10. Published 2018-09-02.
How severe is CVE-2018-16344?: High severity. CVSS v3 base score is 7.5 out of 10.