GetSimpleCMS Path Traversal Vulnerability

GetSimpleCMS is a content management system for individual developers. A path traversal vulnerability exists in GetSimpleCMS-3.3.15. An attacker can exploit this vulnerability to delete arbitrary files...

Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within handling of the...

Arbitrary File Deletion Vulnerability in CRMEB Knowledge Payment System Backend Sy***.php Document File

CRMEB knowledge payment system is based on ThinkPhp5.0 + Vue development of a new retail live / on-demand knowledge payment system. CRMEB knowledge payment system background Sy.php file file exists arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary file...

Arbitrary File Deletion Vulnerability in Fi***.cl***.php File in Dream CMS Backend

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS background Fi.cl.php file exists arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files on the server...

Arbitrary file deletion vulnerability in the Ba***.cl***.php file in the background of Dream CMS

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS background Ba.cl.php file exists arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete any file on the server...

CVE-2020-16940

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

CVE-2020-16895

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have...

Arbitrary File Deletion Vulnerability in ZrLog CMS

ZrLog is a blogging program developed using Java. ZrLog CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to compromise the integrity of the system...

PT-2020-5777 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to the is protected meta function in the wp-includes/meta.php component of the WordPress content management system. This function incorrectly determines the protection status...

Arbitrary File Deletion Vulnerability in XiaoCMS

XiaoCms is a web content management system, provides enterprise building system, station system. XiaoCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete any directory on the server...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58469)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-58465)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58463)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58462)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-58466)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58464)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-58467)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

PT-2020-4309 · Microsoft · Windows Error Reporting Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Manager, allowing an attacker to potentially elevate their privileges by...

File Deletion Vulnerability in ShuipFCMS Content Management System

ShuipFCMS a content management system based on ThinkPHP framework as the core, using an independent grouping approach to development. ShuipFCMS content management system file deletion vulnerability, an attacker can be exploited to delete the install.lock file can lead to the reinstallation of the...

Arbitrary File Deletion Vulnerability in songcms 3.16

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . songcms 3.16 arbitrary file deletion vulnerability , an attacker can use the...