288 matches found
CVE-2018-15818
CMS/plugin: Repute ARForms 3.5.1 and earlier. A vulnerability allows an attacker to delete arbitrary files on the server by sending a malicious request to admin-ajax.php, abusing web server privileges. Affected component is the plugin’s admin AJAX endpoint; impact is file deletion with partial in...
CVE-2018-15818: Improper Input Validation
An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php...
PT-2019-9189
Name of the Vulnerable Software and Affected Versions Repute ARForms versions 3.5.1 and prior Description An issue allows an attacker to delete any file on the server with web server privileges by sending a malicious request to "admin-ajax.php". Recommendations For versions 3.5.1 and prior, updat...
WordPress ARForms plugin <= 3.5.1 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability found by Amir Hossein Mahboubi in WordPress ARForms plugin versions = 3.5.1. Solution Update the WordPress ARForms plugin to the latest available version at least 3.5.2...
WordPress Arforms 3.5.1 Arbitrary File Deletion Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Arforms plugin is used in which a form builder plugin . A security vulnerability exists in WordPress Arforms...
WordPress Arforms 3.5.1 Arbitrary File Delete Exploit
Exploit for php platform in category web applications Exploit Title: WordPress Plugin Arforms 3.5.1 - Delete arbitrary file Google Dork: /plugins/arforms/ Exploit Author: Amir Hossein Mahboubi Twitter: @Mahboubi66 Vendor Homepage: https://www.arformsplugin.com/ Version: =3.5.1 Tested on: Linux &...
WordPress Arforms 3.5.1 Arbitrary File Delete
Exploit Title: WordPress Plugin Arforms 3.5.1 - Delete arbitrary file Google Dork: /plugins/arforms/ Date: 2018-10-17 Exploit Author: Amir Hossein Mahboubi Twitter: @Mahboubi66 Vendor Homepage: https://www.arformsplugin.com/ Version: =3.5.1 Tested on: Linux & Windows CVE : CVE-2018-15818...
