PT-2020-11944

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 84.0.20 Description The issue allows a webmail or demo account to delete arbitrary files. Recommendations For versions prior to 84.0.20, update to version 84.0.20 or later to resolve the issue...

CVE-2019-19374

An issue was discovered in core/assets/form/formquestiontypes/formquestiontypefileupload/formquestiontypefileupload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can delete arbitrary files from the server...

CVE-2012-6135

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process...

CVE-2012-6135

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process...

CVE-2011-4902

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver...

PT-2019-6705

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 4.3.12 TYPO3 versions 4.4.x prior to 4.4.9 TYPO3 versions 4.5.x prior to 4.5.4 Description The issue allows remote attackers to delete arbitrary files on the web server. Recommendations For versions prior to 4.3.12,...

CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

PT-2019-14939

Name of the Vulnerable Software and Affected Versions emlog versions prior to 6.0.0beta Description The issue allows remote authenticated users to delete arbitrary files. This is achieved through a directory traversal vulnerability in the "admin/template.php" endpoint, specifically when the...

CVE-2019-5956

Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors...

CVE-2019-5956

Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors...

CVE-2019-5956: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors...

PT-2019-17891

Name of the Vulnerable Software and Affected Versions WonderCMS versions 2.6.0 and earlier Description A directory traversal issue allows remote attackers to delete arbitrary files. Recommendations For versions 2.6.0 and earlier, update to a version later than 2.6.0 to resolve the issue...

PT-2019-14531

Name of the Vulnerable Software and Affected Versions OKLite version 1.2.25 Description An issue was discovered in the framework/admin/tpl control.php file, allowing remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring. Recommendation...

WonderCMS Path Traversal Vulnerability

WonderCMS is an open source PHP-based content management system CMS. A path traversal vulnerability exists in WonderCMS 2.6.0 and earlier versions, which can be exploited by remote attackers to delete arbitrary files...

CVE-2019-8320

A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2. Before making new directories or touching files which now include path-checking code for symlinks, it would delete the target destination. If that destination was hidden behind a symlink, a malicious gem could...

PT-2019-18465

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to build 6985 Description The issue allows an authenticated user to perform directory traversal, enabling them to delete arbitrary files or create files in new folders in arbitrary locations on the mail...

PT-2019-12269

Name of the Vulnerable Software and Affected Versions ProjectSend version r1053 Description An issue was discovered that allows directory traversal through the upload-process-form.php file, potentially enabling users to read arbitrary files, access the supporting database, delete arbitrary files,...

Advantech WebAccess Access Control Error Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An Access Control Error vulnerability exist...

Code injection

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC...

PT-2019-1024

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.7.6 through 3.0.2 Description: A Directory Traversal issue was discovered in RubyGems. The issue allows a malicious gem to delete arbitrary files on the user's machine if the attacker can guess the paths, potentially leadi...