PHPSHE Arbitrary File Deletion Vulnerability

PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A security vulnerability exists in the admin.php?mod=db&act=del script in PHPSHE version 1.7. A remote attacker can exploit this vulnerability to delete arbitrary files wi...

CVE-2018-17837

An issue was discovered in JTBCPHP 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring...

CVE-2018-17837

An issue was discovered in JTBCPHP 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring...

Arbitrary file deletion

An issue was discovered in JTBCPHP 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring...

CVE-2018-16587

Removed by vendor...

Open Ticket Request System Arbitrary File Deletion Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

SeaCMS Arbitrary File Deletion Vulnerability (CNVD-2018-20079)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 6.64. A remote attacker can exploit the vulnerability to delete arbitrary files with the hel...

Arbitrary File Deletion Vulnerability in phpyun v4.6

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. phpyun v4.6 exists arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

ENSLTP Arbitrary File Deletion Vulnerability

ENSLTP is a security endpoint for Linux defense from the American company McAfee McAfee. An elevation of privilege vulnerability exists in ENSLTP version 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. An attacker can exploit the vulnerability to elevate privileges and thus delete arbitrar...

Monstra CMS Arbitrary File Deletion Vulnerability

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A security vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4. An attacker can...

CVE-2018-16819

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&deletefile= requests...

Arbitrary file deletion

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&deletefile= requests...

CVE-2018-16819

admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&deletefile= requests...

CVE-2018-16819

Summary : CVE-2018-16819 affects Monstra CMS 3.0.4. The admin/index.php endpoint allows arbitrary file deletion via crafted parameters (id=filesmanager&path=uploads/…&delete_file=). The vulnerability is described across multiple sources as an arbitrary file deletion flaw in Monstra CMS 3.0.4. Aff...

Avaya one-X 9.x / 10.0.x / 10.1.x Arbitrary File Disclosure / Deletion Vulnerabilities

Avaya one-X versions 9.x, 10.0.x, and 10.1.x suffer from arbitrary file disclosure and deletion vulnerabilities. Tittle: one-X portal arbitrary OS file access Risk: High Date: 07.Ago.2018 Author: Pedro Andujar Twitter: @pandujar .: INTRO : one-X Portal for IP Office is an application that runs on...

CVE-2018-16774

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...

Arbitrary file deletion

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...

CVE-2018-16774

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...

CVE-2018-16774

CVE-2018-16774 concerns HongCMS 3.0.0, where an improper validation in the file parameter enables directory traversal to delete files via admin/index.php/language/ajax?action=delete (and related path admin/index.php/database/ajax?action=delete). The underlying issue is a traversal vulnerability t...

Avaya one-X 9.x / 10.0.x / 10.1.x Arbitrary File Disclosure / Deletion

=============================== - Advisory - =============================== Tittle: one-X portal arbitrary OS file access Risk: High Date: 07.Ago.2018 Author: Pedro Andujar Twitter: @pandujar .: INTRO : one-X Portal for IP Office is an application that runs on a web server connected to the IP...