glpi -- Unauthenticated File Deletion

MITRE Corporation reports: In GLPI before version 9.5.2, the pluginimage.send.php endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the files and folde...

EyouCms suffers from arbitrary file deletion vulnerability (CNVD-2020-44390)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has an arbitrary file deletion vulnerability that can be exploited by attackers to affect the integrity of the system...

IOBit Advanced SystemCare Free Arbitrary File Deletion Vulnerability

IOBit Advanced SystemCare Free is a system management utility program from IOBit UK. The program is mainly used for scanning, repairing and optimizing your system, among other things. An arbitrary file deletion vulnerability exists in IOBit Advanced SystemCare Free version 13.5.0.263. A local...

CVE-2020-14990

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

Arbitrary file deletion

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

Arbitrary File Deletion Vulnerability in NoneCms Ma***.php File

NoneCms is an open source CMS Content Management System for building corporate websites, personal blogs and supporting mobile. NoneCms Ma.php file contains arbitrary file deletion vulnerability. Attackers can exploit the vulnerability to delete arbitrary files...

Arbitrary file deletion

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can test for the existence of an arbitrary file...

CVE-2020-5590

Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors...

CVE-2020-5590

Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors...

EC-CUBE Path Traversal Vulnerability

EC-CUBE is Japan's EC-CUBE company's set of open source e-commerce system . A path traversal vulnerability exists in EC-CUBE versions 3.0.0 through 3.0.18 and 4.0.0 through 4.0.3. An attacker could exploit this vulnerability to delete arbitrary files or paths on the server...

EC-CUBE Path Traversal Vulnerability

EC-CUBE is Japan's EC-CUBE company's set of open source e-commerce system . A path traversal vulnerability exists in EC-CUBE versions 3.0.0 through 3.0.18 and 4.0.0 through 4.0.3. An attacker could exploit this vulnerability to delete arbitrary files or paths on the server...

Advantech WebAccess SCADA Arbitrary File Deletion

An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations within BwPSLink.exe...

Arbitrary File Deletion Vulnerability in MetInfo of Changsha Mito Information Technology Co.

MetInfo is mainly used to build enterprise websites, using PHP+MySQL architecture, supporting SQLite database and so on. Changsha Mito Information Technology Co., Ltd MetInfo has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files from the websi...

Arbitrary File Deletion Vulnerability in WebAccess SCADA at Advantech (China) Co.

Advantech WebAccess SCADA is a browser-based SCADA software package for supervisory control, data acquisition and visualization. It is used to automate complex industrial processes in the context of remote operation. An arbitrary file deletion vulnerability exists in Advantech China WebAccess...

Unspecified Vulnerability in Schneider Electric Easergy T300 (CNVD-2021-21477)

The Schneider Electric Easergy T300 is a remote terminal unit for the power industry from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Easergy T300 using firmware version 1.5.2 and earlier, which can be exploited by an attacker to elevate privileges and...

CVE-2020-7509

A CWE-269: Improper privilege management write vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to elevate their privileges and delete files...

Privilege escalation

A CWE-269: Improper privilege management write vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to elevate their privileges and delete files...

KingComposer < 2.9.4 - Multiple Critical Issues

Jerome Bruandet, from nintechnet, discovered multiple issues such as authenticated WordPress options change, content injection, stored Cross-Site Scripting XSS, arbitrary file deletion and remote code execution...

CVE-2020-7280

Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...

CVE-2020-7280

CVE-2020-7280 : Privilege escalation in McAfee VirusScan Enterprise (VSE) versions prior to 8.8 Patch 15. The issue arises during daily DAT updates where an attacker can alter the target of symbolic links, enabling local users to delete or create files they normally cannot. Timing-dependent vulne...