x2.2.3

DATE	CVE	VULNERABILITY TITLE	RISK
2018-08-30	CVE-2018-16141	Path Traversal vulnerability in Thinkcmf Thinkcmfx X2.2.3 ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter with a ..\ sequence. network low complexity thinkcmf CWE-22	5.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.