4 matches found
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
CVE-2021-21909
CVE-2021-21909 affects Garrett Metal Detectors iC Module CMA Version 5.0. Affected component is the CMA CLI (del/delenv) exposed over TCP (port 6877) with an authenticated CLI. Root cause is improper validation/sanitization of the user-supplied file argument in handle_delete/delEnv, allowing dire...
CVE-2004-2747: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...