CVE-2018-9038

CVE-2018-9038 describes an arbitrary folder deletion vulnerability in Monstra CMS version 3.0.4. An authenticated attacker can exploit this flaw by sending a specially crafted request to the admin interface, allowing them to delete arbitrary directories on the server. This vulnerability has a CVSS score of 6.5 (Medium) due to its low attack complexity and high impact on integrity, as it allows for unauthorized file deletion. While not actively exploited in the wild and lacking Metasploit or Nuclei modules, a proof-of-concept exploit is publicly available on ExploitDB, indicating a potential for future exploitation. There is minimal community discussion or media coverage surrounding this CVE.