CVE-2018-8968

CVE-2018-8968 describes a directory traversal vulnerability in zzcms 8.2, specifically within the user/manage.php component. An unauthenticated remote attacker can delete arbitrary files by manipulating the oldimg or oldflv parameters during an action=modify request. This vulnerability carries a CVSS score of 7.5 (High), indicating a network-based attack with low complexity and high impact on integrity, potentially leading to database access by deleting critical files like install.lock. While the EPSS score is low, suggesting minimal current exploitation, there is no known public exploit code or active exploitation, and it has received no community discussion or media coverage.