CVE-2018-18831

CVE-2018-18831 is a directory traversal vulnerability affecting Mingsoft MCMS version 4.6.5, specifically within the GeneraterAction.java component. An unauthenticated attacker can exploit this flaw to write arbitrary .jsp files to any directory on the server by manipulating the 'url' parameter with '../' sequences. This vulnerability carries a high CVSS score of 7.5, indicating a severe risk with a network-based attack vector and low attack complexity, potentially leading to significant integrity compromise (e.g., remote code execution). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.