1056 matches found
CVE-2009-2101
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when registerglobals is enabled, allows remote attackers to delete arbitrary files via a .. dot dot in the deleteTorrent parameter...
Versalsoft HTTP Image Uploader ActiveX Vulnerability
This host is installed with Versalsoft HTTP Image Uploader and is prone to ActiveX vulnerability. OpenVAS Vulnerability Test $Id: gbversalsofthttpimageupldractvxvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Versalsoft HTTP Image Uploader ActiveX Vulnerability Authors: Nikita MR Copyright: Copyright c...
CVE-2008-6638
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...
CVE-2008-6638
Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...
FreeBSD : pivot-weblog -- file deletion vulnerability (0fe73a4a-1b18-11de-8226-0030843d3802)
Secunia reports : A vulnerability has been discovered in Pivot, which can be exploited by malicious people to delete certain files. Input passed to the 'refkey' parameter in extensions/bbclonetools/count.php is not properly sanitised before being used to delete files. This can be exploited to...
CVE-2008-6478: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...
GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit
No description provided by source. !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be...
GuildFTPd FTP Server 0.999.14 - Remote Delete Files
GuildFTPd FTP Server 0.999.14 - Remote Delete Files !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" request...
GuildFTPd FTP Server 0.999.14 - Remote Delete Files
!/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be exploited to escape the FTP root and...
GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit
Exploit for unknown platform in category remote exploits ========================================================= GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit ========================================================= !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote...
CVE-2008-5382
Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...
CVE-2008-5407: Improper Authentication
Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors...
CVE-2008-5303
Race condition in the rmtree function in File::Path 1.08 lib/File/Path.pm in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. ...
Race condition
rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under 1 /var/lock or 2 /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require ...
CVE-2008-5007
createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...
CVE-2008-5007
createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...
CVE-2008-5007
createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...
CVE-2008-5007: Improper Link Resolution Before File Access
createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...
CVE-2008-4425
Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action...