CVE-2019-7235

An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.

• CWE-22

• https://github.com/idreamsoft/iCMS/issues/52Exploit, Third Party Advisory
• https://github.com/idreamsoft/iCMS/issues/52Exploit, Third Party Advisory

Published

Jan 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7229The ABB CP635 HMI uses two different transmission methods to…8.3
• CVE-2019-7230The ABB IDAL FTP server mishandles format strings in a usern…8.8
• CVE-2019-7231The ABB IDAL FTP server is vulnerable to a buffer overflow w…5.7
• CVE-2019-7232The ABB IDAL HTTP server is vulnerable to a buffer overflow …8.8
• CVE-2019-7233In libdoc through 2019-01-28, doc2text in catdoc.c has a NUL…
• CVE-2019-7234An issue was discovered in idreamsoft iCMS 7.0.13. admincp.p…
• CVE-2019-7236An issue was discovered in idreamsoft iCMS 7.0.13. editor/ed…
• CVE-2019-7237An issue was discovered in idreamsoft iCMS 7.0.13 on Windows…
• CVE-2019-7238Sonatype Nexus Repository Manager before 3.15.0 has Incorrec…9.8
• CVE-2019-7240An issue was discovered in WinRing0x64.sys in Moo0 System Mo…7.2
• CVE-2019-7244An issue was discovered in kerneld.sys in AIDA64 before 5.99…7.2
• CVE-2019-7245An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z be…7.2