10656 matches found
Halo file deletion vulnerability
Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 is vulnerable to file deletion. An attacker can use this vulnerability to delete arbitrary files via delBackup...
CVE-2020-19038
File Deletion vulnerability in Halo 0.4.3 via delBackup...
CVE-2020-19038
File Deletion vulnerability in Halo 0.4.3 via delBackup...
Arbitrary file deletion
File Deletion vulnerability in Halo 0.4.3 via delBackup...
CVE-2020-19038
CVE-2020-19038 affects Halo version 0.4.3 and is described as a File Deletion vulnerability via the delBackup function. The connected documents consistently identify Halo 0.4.3 as vulnerable to arbitrary file deletion through delBackup, indicating a flaw in the handling of that function. The root...
CVE-2020-19038
File Deletion vulnerability in Halo 0.4.3 via delBackup...
Halo 安全漏洞
Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 is vulnerable to file deletion. An attacker can use this vulnerability to delete arbitrary files via delBackup...
Arbitrary File Deletion Vulnerability in Panavision OA E-office
Panavision OA E-office is a professional office software, a working platform for small businesses or teams. An arbitrary file deletion vulnerability exists in Panmicro OA E-office, which can be exploited by an attacker to delete arbitrary files from the server...
PT-2021-10273 · Halo · Halo
Name of the Vulnerable Software and Affected Versions: Halo version 0.4.3 Description: A File Deletion issue exists via the delBackup function. Recommendations: For Halo version 0.4.3, consider restricting access to the delBackup function as a temporary workaround until a patch is available...
Arbitrary File Deletion Vulnerability in Xiancheng CMS
Xiancheng CMS is a PHP article management system with PHP+Mysql architecture. Xiancheng CMS arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...
Arbitrary File Deletion Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.
Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is an arbitrary file deletion vulnerability in the Library Cluster Management System of Guangzhou Tutron Computer Software...
CVE-2020-24146
Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...
CVE-2020-24146
Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...
MuYuCMS suffers from arbitrary file deletion vulnerability (CNVD-2021-51335)
MuYuCMS is an emerging lightweight, public service content management system. MuYuCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...
Arbitrary File Deletion Vulnerability in qwadmin of Beijing Chave Network Technology Co.
qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin exists arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...
Arbitrary File Deletion Vulnerability in Man City CMS
Man City CMS program is a complete and powerful rapid site building system developed with the core of CI framework and running in PHP MYSQL environment. ManCity CMS has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete files arbitrarily...
Arbitrary File Deletion Vulnerability in CLTPHP
CLTPHP is a PHP content management system and an open source CMS system. CLTPHP has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...
Cross-site Scripting (XSS) - Stored in projectsend/projectsend
💥 BUG CSRF bug to delete file 💥 SUMMURY during batch delete file there is no csrf token present 💥 STEP TO REPRODUCE 1. vulnerable url is http://localhost/projectsend2/manage-files.php?action=delete&batch=27&batch=31&page=1 .\ Here in this url change file-id to delete and open the url and see file...
Arbitrary File Deletion Vulnerability in phpwcms
phpwcms is an open source web content management system. An arbitrary file deletion vulnerability exists in phpwcms, which can be exploited by an attacker to delete files on the server...
