CVE-2018-18485

7.5 highEPSS 1.8%

High (7.5) in phpshe phpshe. EPSS 1.8% chance of exploitation in the next 30 days.

An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2018-10-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpshe:phpshe

References

https://gitee.com/koyshe/phpshe/issues/INOG4
https://gitee.com/koyshe/phpshe/issues/INOG4

Check your stack JSON