CVE-2021-44127

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

CVE-2021-44127: Undefined Security Weakness

In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...

PT-2022-12000

Name of the Vulnerable Software and Affected Versions DLink DAP-1360 F1 versions =v6.10 Description The issue allows an attacker to execute arbitrary system commands using the file parameter when it is set to name=deleteFile after authorization. This is related to the "webupg" binary...

D-Link DAP-1360 security vulnerability

The D-Link DAP-1360 is a router from D-Link, a Chinese company. A security vulnerability exists in the DLink DAP-1360 F1 firmware, which stems from the fact that an attacker can execute arbitrary system commands with the name=deleteFile parameter, after authorization, using the file parameter to...

Maxsite CMS arbitrary file deletion vulnerability

MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project . Maxsite CMS has arbitrary file deletion vulnerability , the vulnerability stems from all-files-update-ajax.php in the dir and deletefile parameters for the file name lack of validation , the attacker c...

CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

PT-2022-17276

Name of the Vulnerable Software and Affected Versions Maxsite CMS version v180 Description The issue allows for arbitrary file deletion. This is achieved through the /admin page/all-files-update-ajax.php endpoint via the dir and deletefile parameters. Recommendations For Maxsite CMS version v180,...

MaxSite CMS path traversal vulnerability

MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project . Maxsite CMS has arbitrary file deletion vulnerability , the vulnerability stems from all-files-update-ajax.php in the dir and deletefile parameters for the file name lack of validation , the attacker c...

CVE-2022-25412: Improper Limitation of a Pathname to a Restricted Directory

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

CVE-2021-21891

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch deletefile. An attacker can make an...

CVE-2021-21891

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch deletefile. An attacker can make an...

PT-2021-14821

Name of the Vulnerable Software and Affected Versions Lantronix PremierWave 2050 version 8.9.0.0R4 Description A stack-based buffer overflow issue exists in the Web Manager FsBrowseClean functionality. This can be triggered by a specially crafted HTTP request, potentially leading to remote code...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

FlatPress cross-site request forgery vulnerability

FlatPress is a lightweight, easy-to-setup blogging engine. flatPress version 1.1 is vulnerable to cross-site request forgery. An attacker can use the DeleteFile function in flat/admin.php to conduct a cross-site request forgery attack...

Flatpress Cross-Site Request Forgery Vulnerability

FlatPress is a lightweight, easy-to-setup blogging engine. flatPress version 1.1 is vulnerable to cross-site request forgery. An attacker can use the DeleteFile function in flat/admin.php to conduct a cross-site request forgery attack...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

CVE-2020-22761 : FlatPress 1.1 is vulnerable to a CSRF flaw via the DeleteFile function in flat/admin.php. The issue allows unauthorized actions on affected installations. Evidence across sources (NVD/OpenVAS/Red Hat/ cnnvd) confirms the vulnerability, with CVSSv3.1 base score up to 8.8 (HIGH) an...