CVE-2016-15038

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions up to 3.0.8

Description A critical issue was found in the file /deletefile.php, where the manipulation of the filename argument leads to path traversal. This issue can be exploited remotely.

Recommendations For versions up to 3.0.8, consider restricting access to the /deletefile.php file until a patch is available. As a temporary workaround, avoid using the filename argument in the affected file to minimize the risk of exploitation.