10821 matches found
DedeCMS 安全漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...
CVE-2022-44280
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...
CVE-2022-43196
CVE-2022-43196 affects dedecmdv6 v6.1.9. The vulnerability enables Arbitrary file deletion via the file_manage_control.php endpoint. The provided documents confirm the affected software and the specific function/file involved, but do not supply full root-cause details, affected environments beyon...
PT-2022-27165 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue allows deletion of any file via the "/asms/classes/Master.php?f=delete img" API endpoint. Recommendations: For Automotive Shop Management System version 1.0, as a temporary...
CVE-2022-43196
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...
CVE-2022-43196
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...
CVE-2022-3861 Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import, mfn-items-import-page, and mfn-items-import parameters passed through the mfnbuilderimport, mfnbuilderimportpage,...
CVE-2022-3763
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in...
Cross site request forgery (csrf)
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in...
CVE-2022-3763 Booster for WooCommerce - Checkout Files Deletion via CSRF
The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, Booster Elite for WooCommerce WordPress plugin before 1.1.7 do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to circumvent existing security restrictions and upload or delete certain files.
The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and upload or delete certain files using a specially created HTTP...
WordPress plugin Booster for WooCommerce 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2022-44584
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44584
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
Arbitrary file deletion
Auth. admin+ Arbitrary File Read vulnerability in S2W – Import Shopify to WooCommerce plugin = 1.1.12 on WordPress...
Arbitrary file deletion
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
Arbitrary file deletion
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44584 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44584
CVE-2022-44584 affects WordPress WatchTowerHQ plugin up to version 3.6.15. The vulnerability stems from improper access control in the plugin’s REST API endpoints, allowing unauthenticated attackers to delete arbitrary files. Impact is described as unauthenticated arbitrary file deletion with hig...