CVE

Id
69131  
CVE No.
CVE-2014-1836  
Status
Candidate  
Description
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.  
Phase
Assigned (20140130)  
Votes
None (candidate not yet proposed)  
Comments