CVE-2018-18485

Summary: 
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock.
Published: 
Thursday, October 18, 2018 - 17:29
cvss: