oss-security - CVE Request - Intelliants Subrion CMS Arbitrary Files Delete

Date: Sat, 27 Aug 2016 22:14:13 +0800 (GMT+08:00)
From: 曾鸿坤 <hongkun.zeng@...ppsecurity.com.cn>
To: oss-security <oss-security@...ts.openwall.com>
Subject: CVE Request - Intelliants Subrion CMS Arbitrary Files Delete

Intelliants Subrion CMS Arbitrary Files Delete
This vulnerability allows remote authenticated users to delete arbitrary files on the server.
Fix commit: https://github.com/intelliants/subrion/commit/bf2596f2ab27e37456910886e69b48484a76dd64

The auto-upgrader patch has been released.
Could you allocate a CVE ID for this?

Thank you

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.