lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.