CVE-2008-5794: Lovecms

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.

Affected products

• Lovecms Lovecms: version 1.6.2 only

Published 2008-12-31. Last modified 2026-06-16.