CVE-2019-9015

A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding directory is deleted, as demonstrated by ./ to delete the entire web site.

• CWE-22

• https://github.com/yangsuda/mopcms/issues/1Exploit, Third Party Advisory
• https://github.com/yangsuda/mopcms/issues/1Exploit, Third Party Advisory

Published

Feb 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9008An issue was discovered in 3S-Smart CODESYS V3 through 3.5.1…8.8
• CVE-2019-9009An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 …7.5
• CVE-2019-9010An issue was discovered in 3S-Smart CODESYS V3 products. The…9.8
• CVE-2019-9011In Pilz PMC programming tool 3.x before 3.5.17 (based on COD…5.3
• CVE-2019-9012An issue was discovered in 3S-Smart CODESYS V3 products. A c…7.5
• CVE-2019-9013An issue was discovered in 3S-Smart CODESYS V3 products. The…8.8
• CVE-2019-9016An XSS vulnerability was discovered in MOPCMS through 2018-1…
• CVE-2019-9017DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 ha…7.5
• CVE-2019-9019The British Airways Entertainment System, as installed on Bo…
• CVE-2019-9020An issue was discovered in PHP before 5.6.40, 7.x before 7.1…
• CVE-2019-9021An issue was discovered in PHP before 5.6.40, 7.x before 7.1…
• CVE-2019-9022An issue was discovered in PHP 7.x before 7.1.26, 7.2.x befo…