304 matches found
Path traversal
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...
CVE-2021-20034
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings...
Microsoft Windows Update Agent Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Windows Update...
Microsoft Windows Setup Directory Junction Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...
The vulnerability of the security function for designing a file system in the Windows operating system allows a perpetrator to delete the target file.
The vulnerability of the file system security function in the Windows operating system is related to file redirection errors. Exploiting this vulnerability could allow an attacker to delete the target file...
CVE-2020-12130
The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function...
CVE-2019-19668: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html...
WordPress Arforms Plugin Input Validation Error Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ARforms is a responsive form builder plugin used in it. An input validation error vulnerability exists in the 'arfdeletefile' function ...
CVE-2019-16902
In the ARforms plugin 3.7.1 for WordPress, arfdeletefile in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname...
PT-2019-14854
Name of the Vulnerable Software and Affected Versions ARforms plugin version 3.7.1 for WordPress Description The issue allows unauthenticated deletion of an arbitrary file by supplying the full pathname through the arf delete file function in arformcontroller.php. Recommendations For ARforms plug...
CVE-2019-14793
The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmbdeletefile attachmentid parameter...
The vulnerability of the web interface of Pelco Sarix Enhanced camera software allows a intruder to delete any file they desire.
The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to errors in access control management. Exploiting this vulnerability could allow a remote attacker to delete any file they desire...
Path traversal
tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths0 path traversal mitigation bypass through the deletefile action in execute.php...
CVE-2018-20790
tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths0 path traversal mitigation bypass through the deletefile action in execute.php...
CVE-2018-20790
The CVE-2018-20790 entry affects tecrail Responsive FileManager 9.13.4. A path traversal vulnerability exists in the delete_file action within execute.php, where a paths[0] traversal mitigation can be bypassed, enabling remote attackers to delete arbitrary files. This is initiated via the delete_...
PT-2019-10232
Name of the Vulnerable Software and Affected Versions: tecrail Responsive FileManager version 9.13.4 Description: The issue allows remote attackers to delete an arbitrary file due to a paths0 path traversal mitigation bypass through the "delete file" action in the "execute.php" endpoint...
Omron CX-Supervisor Command Injection Vulnerability
Omron CX-Supervisor is a powerful and advanced machine visualization software package that provides a very flexible PC-based HMI environment. A command injection vulnerability exists in Omron CX-Supervisor 3.42 and earlier versions, which can be exploited by an attacker to inject commands via a...
Design/Logic Flaw
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleting files...
Jirafeau Cross-Site Request Forgery Vulnerability (CNVD-2018-13352)
Jirafeau is a file sharing website system. A cross-site request forgery vulnerability exists in the delete file feature of the admin panel in versions of Jirafeau prior to 3.4.1. A remote attacker can exploit this vulnerability to force an administrator to delete files uploaded by other users via...