10832 matches found
CVE-2021-40285
htmly v2.8.1 contains an arbitrary file deletion vulnerability in the component \views\backup.html.php. Affected software: htmly 2.8.1. Root cause: arbitrary file deletion via the backup page component. Impact per CVSS: I and A HIGH, with availability impact also HIGH (per NVD metrics). Exploitat...
PT-2022-11210 · Htmly · Htmly
Name of the Vulnerable Software and Affected Versions: htmly version 2.8.1 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component viewsbackup.html.php. There is no information provided about the estimated number of potentially affected devices...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
Arbitrary file deletion
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-36261
CVE-2022-36261 affects taocms 3.0.2. The connected sources describe an arbitrary file deletion flaw exploitable via a crafted request to admin.php?action=file&ctrl=del&path=/../../../test.txt, indicating a path traversal issue that can delete server files. The NVD notes a CVSS v3.1 base score of ...
CVE-2022-36261
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url admin.php?action=file&ctrl=del&path=/../../../test.txt...
CVE-2022-2557
The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...
Arbitrary file deletion
The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that can be exploited by users with "Contributor" permissions or higher...
CVE-2022-2557 WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion
The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...
PT-2022-17373 · WordPress · Team Wordpress
Name of the Vulnerable Software and Affected Versions: The Team WordPress plugin versions prior to 4.1.2 Description: The issue allows any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is...
CVE-2022-36171
MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion...
CVE-2022-36171
MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion...
CVE-2022-36171
MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion...
Arbitrary file deletion
MapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion...
CVE-2022-36170
MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...
CVE-2022-36170
MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...