CVE-2018-10083

CMS Made Simple (CMSMS) up to version 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard. The flaw is triggered by directory traversal sequences in the val parameter of a cmd=del request, due to inadequate validation in the modules/FilePicker code. Impact is the potent...

CVE-2018-9850

In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parameter of an Admin-Data-del request...

Arbitrary File Deletion Vulnerability in zzcms

ZzCMS is the content management system of Webmaster Merchants. An arbitrary file deletion vulnerability exists in user/adv.php in zzcms 8.2. A remote attacker can exploit this vulnerability by deleting arbitrary files via a directory traversal sequence in the oldimg parameter. An attacker can...

Arbitrary File Deletion Vulnerability in Cscms Version v4.1.8

Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. Cscms v4.1.8 has an arbitrary file deletion vulnerability. An attacker can use this vulnerability to delete arbitrary files from the background and violently execute a reinstallation getshell...

DedeCMS system has arbitrary file deletion vulnerability

Weaving dream content management system DedeCms is a PHP open source website management system. An arbitrary file deletion vulnerability exists in the DedeCMS system\member\editface.php file. An attacker can exploit the vulnerability to delete arbitrary files...

Gxlcms QY Arbitrary File Deletion Vulnerability

Gxlcms QY is an enterprise website creation system. A security vulnerability exists in the Lib\Lib\Action\Admin\DataAction.class.php file in Gxlcms QY version 1.0.0713. A remote attacker can exploit this vulnerability by deleting arbitrary files with the 'id' parameter in the Admin-Data-del reque...

Studio 42 elFinder on Windows Arbitrary File Deletion Vulnerability

Studio 42 elFinder on Windows is a Windows-based platform using jQuery and jQuery UI and written in JavaScript open source Web file manager . A security vulnerability exists in the 'zipdl' function of the elFinder.class.php file in versions of Studio 42 elFinder prior to 2.1.37 for Windows-based...

YUNUCMS v1.0.7 \app\admin\controller\Upgrade.php Existing Arbitrary File Deletion Vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.0.7 \app\admin\controller\Upgrade.php has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability...

Google Kubernetes Arbitrary File Deletion Vulnerability

Google Kubernetes is an open source Docker container cluster management system from Google, Inc. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. There is a security vulnerability in Google Kubernetes. An...

ZZCMS user/licence_save.php file arbitrary file deletion vulnerability

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A security vulnerability exists in the user/licencesave.php file in ZZCMS version 8.2. The vulnerability can be exploited by a remote attacker to delete arbitrary files with the 'oldimg' parameter in an...

ZZCMS user/manage.php file arbitrary file deletion vulnerability

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A security vulnerability exists in the user/manage.php file in ZZCMS version 8.2. The vulnerability can be exploited by a remote attacker to delete arbitrary files with the 'oldimg' or 'oldflv' parameter in an...

PT-2018-18748 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: An issue in zzcms allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request to the "user/licence save.php" endpoint. This can be...

Arbitrary File Deletion Vulnerability in ZZCMS Version 8.2

zzcms is a free website builder developed in asp language. ZZCMS 8.2 version of the usermsg.php file in the arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...

Arbitrary File Deletion

github.com/kubernetes/kubernetes is vulnerable to arbitrary file deletion attacks. Attackers can trigger the deletion of files or directories from nodes where they are running using a secret, configMap,, projected or downwardAPI volume...

Adobe Connect Arbitrary File Deletion Vulnerability

Adobe Connect web conferencing software service provides an immersive online meeting experience for collaboration, virtual classrooms and large-scale webinars. An arbitrary file deletion vulnerability exists in Adobe Connect due to a command injection flaw in the Adobe Connect URI handler that ca...

BEES V4.0 Arbitrary File Deletion Vulnerability

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. An arbitrary file deletion vulnerability exists in the BEESCMS 4.0 backend. The vulnerability is due to the system fails to filter parameters effectively. An attacker can exploit the vulnerability to delete...

Arbitrary File Deletion Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file within the site...

YXCMS has multiple vulnerabilities

Yxcms is an enterprise building system based on PHP and mysql technology. Yxcms 1.4.6 version exists stored XSS, arbitrary file deletion, file write, SQL injection vulnerability, attackers can exploit the vulnerability to obtain control of the web server...

WonderCMS Arbitrary File Deletion Vulnerability

WonderCMS is an open source, fast, small and simple flat file cms. An arbitrary file deletion vulnerability exists in index.php in WonderCMS versions prior to 2.4.1. A remote attacker can exploit this vulnerability to delete arbitrary files via directory traversal...

Arbitrary File Deletion Vulnerability in iZhanCMS Version v2.1

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...