CVE-2019-8411

admin/dldata.php in zzcms 2018 2018-10-19 allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal...

PT-2019-19019

Name of the Vulnerable Software and Affected Versions FeiFeiCms version 4.0.181010 Description The issue allows remote attackers to read or delete arbitrary files due to a directory traversal vulnerability. This can be exploited via specific API endpoints, such as...

CVE-2018-0702

Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors...

CVE-2018-0702: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors...

PT-2019-8704

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.0 through 5.4.5 Description A directory traversal issue allows remote attackers to delete arbitrary files. Recommendations For Cybozu Mailwise versions 5.0.0 through 5.4.5, update to a version that contains a fix f...

PT-2019-8706

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.1 Description A directory traversal issue allows remote attackers to delete arbitrary files via the Keitai Screen feature. Recommendations For Cybozu Office versions 10.0.0 through 10.8.1, update to a...

CVE-2018-20128

An issue was discovered in UsualToolCMS v8.0. cmsadmin\asqlback.php allows remote attackers to delete arbitrary files via a backname directory-traversal pathname followed by a crafted substring...

PT-2018-15260

Name of the Vulnerable Software and Affected Versions zzzphp cms version 1.5.8 Description An issue was discovered that allows remote attackers to delete arbitrary files. This is possible due to the del file function in the /admin/save.php endpoint, which can be exploited by using a mixed-case...

PT-2018-15261

Name of the Vulnerable Software and Affected Versions UsualToolCMS version 8.0 Description An issue was discovered that allows remote attackers to delete arbitrary files via a directory-traversal pathname followed by a crafted substring in the cmsadmina sqlback.php endpoint. Recommendations For...

Design/Logic Flaw

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button...

CVE-2018-19329

GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button...

Cybozu Office Directory Traversal Vulnerability

Cybozu Office is a web-based cross-platform collaborative office solution. A directory traversal vulnerability exists in Cybozu Office, which can be exploited by remote attackers to delete arbitrary files on the server...

CVE-2018-18936

An issue was discovered in PopojiCMS v2.0.1. adminlibrary.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route.php?mod=library&act=delete id parameter...

PT-2018-14732

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description An issue in admin library.php allows remote attackers to delete arbitrary files via directory traversal in the "po-admin/route.php?mod=library&act=delete" endpoint, specifically using the id parameter...

PT-2018-14485

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description An issue was discovered that allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter in the "admin.php?mod=db&act=del" API endpoint. This can be leveraged to...

Design/Logic Flaw

An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...

PT-2018-1577

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux affected versions not specified Windows 10 Windows 10 Servers Description A security feature bypass issue exists due to improper handling of case sensitivity in Windows Subsystem for Linux. This could allow an...

CVE-2018-15141

Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete...

CVE-2018-6830: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, C1 V2, C1 Lite, and ...

CVE-2018-13122

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete Files screen, as demonstrated by a ?i=var/www/html/&f=123.php&p=edit&p=deletefile URI...