982 matches found
CVE-2018-9038
Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&deletedir=./&path=uploads/ request...
CVE-2018-9110
Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue...
CVE-2018-9110
Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue...
CVE-2018-9109
Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process...
CVE-2018-9109
Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process...
CVE-2018-8965
An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock...
SquirrelMail Directory Traversal Vulnerability
SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A directory traversal vulnerability exists in SquirrelMail version 1.4.22. An attacker can exploit this vulnerability to obtain or potentially delete files on the hosting server...
CVE-2018-8741
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate or potentially delete files from the hosting server, related to ../ in the attlocalname field in Deliver.class.php...
UBUNTU-CVE-2018-8741
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate or potentially delete files from the hosting server, related to ../ in the attlocalname field in Deliver.class.php...
Oracle Database Attacking Tool: ODAT
ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely . Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid SIDs and credentials in order to connect to the database You have a...
HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03952)
HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...
Your startup disk is almost full – How you can fix it on your Mac
Every Mac user will experience the message “Your startup disk is almost full” at one time or another. Understanding what “startup disk is full” actually means is the first important step before you can fix this issue. What if my Mac’s Startup Disk is Full? The answer to this question is easy. Whe...
The vulnerability of the Sentinel License Manager, related to improper restriction of the path name to the catalog, allows a violator to delete or modify protected files.
The vulnerability of the Sentinel License Manager is related to an incorrect restriction on the path name to the “/int/” directory. Exploiting this vulnerability allows a malicious actor to delete or modify protected files using the “alpremove” and “checkinfile” parameters...
CVE-2017-16599
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
CVE-2014-5509
clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$...
Code injection
clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$...
OneThird CMS vulnerable to directory traversal
Overview OneThird CMS provided by SpiQe Software is a Contents Management System CMS. OneThird CMS contains a directory traversal vulnerability CWE-22. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
The vulnerability in the server component of the SAP POS software for accounting automation, trading, and production allows a perpetrator to read, modify, and delete files.
The vulnerability in the server component of the SAP Point of Sale software for accounting, sales, and production automation involves a lack of authentication procedures. Exploiting this vulnerability allows a malicious actor to read, modify, and delete files using port 2200...
Huawei Reading App Arbitrary File Deletion Vulnerability
Huawei Read is the built-in mobile reading software for Huawei phones. The Huawei Reading App suffers from an arbitrary file deletion vulnerability, which is due to the software failing to adequately verify user-submitted input. An attacker could exploit the vulnerability to delete specific files...