PT-2020-12527 · Typo3 · Typo3/Cms

Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 9.0.0 through 9.5.16 TYPO3 CMS versions 10.0.0 through 10.4.1 Description: The issue arises when unserialize is called on malicious user-submitted content, potentially leading to the modification of dynamically-determined...

Dream CMS LmxCMS has an arbitrary file deletion vulnerability

LmxCMS is developed using php language and mysql database, and adopts the mainstream MVC design model. Dream CMS LmxCMS has an arbitrary file deletion vulnerability that can be exploited by attackers to cause arbitrary file deletion...

Microsoft Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service wbengine that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application tha...

Arbitrary File Deletion Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. Haiwell Haiwei Cloud SCADA configuration software Cloud SCADA arbitrary file deletion vulnerability, an attacker can exploit...

Arbitrary File Deletion Vulnerability in SiteServerCMS

SiteServerCMS is a content management system developed by Beijing Baiyong Qianwei Software Technology Development Co. SiteServerCMS has an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...

CuteNews 2.1.2 Arbitrary File Deletion

Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion Date: 2020-05-08 Author: Besim ALTINOK Vendor Homepage: https://cutephp.com Software Link: https://cutephp.com/click.php?cutenewslatest Version: v2.1.2 Maybe it affect other versions Tested on: Xampp Credit: İsmail BOZKURT Remotely: Yes...

CuteNews 2.1.2 - Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion Author: Besim ALTINOK Vendor Homepage: https://cutephp.com Software Link: https://cutephp.com/click.php?cutenewslatest Version: v2.1.2 Maybe it affect other versions Tested on: Xampp...

CuteNews 2.1.2 - Arbitrary File Deletion

Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion Date: 2020-05-08 Author: Besim ALTINOK Vendor Homepage: https://cutephp.com Software Link: https://cutephp.com/click.php?cutenewslatest Version: v2.1.2 Maybe it affect other versions Tested on: Xampp Credit: İsmail BOZKURT Remotely: Yes...

McAfee Endpoint Security Privilege Mobilization Vulnerability (CNVD-2020-35075)

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on....

SIYUCMS 5.1 Arbitrary File Deletion Vulnerability

SIYUCMS is a content management system based on ThinkPHP5 + AdminLTE. An arbitrary file deletion vulnerability exists in SIYUCMS version 5.1, which can be exploited by an attacker to delete arbitrary files...

CVE-2020-7267

Privilege Escalation vulnerability in McAfee VirusScan Enterprise VSE for Linux prior to 2.0.3 Hotfix 2635000 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

CVE-2020-7267

Affected software: McAfee VirusScan Enterprise for Linux (VSEL) prior to 2.0.3 Hotfix 2635000. Vulnerability details: Privilege escalation via manipulation of symbolic links to redirect a McAfee delete operation to an unintended file. The root cause is the handling of delete actions through symli...

CVE-2020-7265

Privilege Escalation vulnerability in McAfee Endpoint Security ENS for Mac prior to 10.6.9 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a...

CVE-2020-7264

Privilege Escalation vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 Hotfix 199847 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved...

CVE-2020-7266

CVE-2020-7266 affects McAfee VirusScan Enterprise (VSE) for Windows prior to 8.8 Patch 14 Hotfix 116778. A local privilege escalation exists where an attacker can delete restricted files by abusing symbolic links to redirect a McAfee delete action to an unintended file. Root cause: manipulation o...

CVE-2020-12010

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user to use a specially crafted file to delete files outside the application’s control...

Arbitrary file deletion

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Exploit Title: i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion Author: Besim ALTINOK Vendor Homepage: https://www.i-doit.org/ Software Link: https://sourceforge.net/projects/i-doit/ Version: v1.14.1 Tested on: Xampp Credit: İsmail...

webTareas 2.0.p8 - Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Exploit Title: webTareas 2.0.p8 - Arbitrary File Deletion Author: Besim ALTINOK Vendor Homepage: https://sourceforge.net/projects/webtareas/files/ Software Link: https://sourceforge.net/projects/webtareas/files/ Version: v2.0.p8 Tested on: Xam...

Arbitrary File Deletion Vulnerability in SIYUCMS

SIYUCMS is a content management system based on the latest version of ThinkPHP-5.1.X framework with AdminLTE in the backend front-end framework. SIYUCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...