Shenzhen Yuanmeng Yun Technology Co., Ltd. WeiPHP has arbitrary file deletion vulnerability

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. Shenzhen Yuanmeng Cloud Technology Co. WeiPHP has an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files on t...

Access Control Error Vulnerability in Multiple ABB Products

ABB OPCServer for AC800M and others are products of ABB Switzerland.ABB OPCServer for AC800M is an OPC OLE for Process Control server for AC800M.Control Builder M Professional is a Compact Control Builder. MMSServer for AC800M is an MMS server for AC800M. An Access Control Error vulnerability...

Harbin Weicheng Technology Co., Ltd. OurPHP has an arbitrary file deletion vulnerability

OurPHP is a PHP+MySQL based development of W3C-compliant website building system. Harbin Weicheng Technology Co., Ltd OurPHP has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any system files, and can further lead to the system being reinstalled...

Arbitrary File Deletion Vulnerability in WeCenter Learning Free Edition

WeCenter is an open source knowledge-based social Q&A community program. An arbitrary file deletion vulnerability exists in the free version of WeCenter Learning, which can be exploited by an attacker to delete arbitrary files from the server...

Arbitrary File Deletion Vulnerability in Five Fingers CMS

Five Fingers CMS is an open source content management system. Five Fingers CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary server files...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-29403)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-29405)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Arbitrary File Deletion Vulnerability in Advantech WebAccess/SCADA

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-29402)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Mito enterprise website system exists arbitrary file deletion vulnerability

Mito enterprise building system is a commercial open source building system, using PHP + MYSQL architecture. Mito enterprise website system there are arbitrary file deletion vulnerability, attackers can use this vulnerability to delete arbitrary files...

Citrix WEM 1903 - Roaming folder files are deleted by VUEMUIAgent.exe on logon

Users noticed that the icons in the task bar went white. This was due to a lot of folders and files were deleted in the User Profiles Example Appdata\Roaming\Adobe\Acrobat\2017\ Appdata\Roaming\Google\Chrome\ Appdata\Roaming\Macromedia\Flash Player\ Appdata\Roaming\Microsoft\Credentials...

MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions

The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’, and ‘ajaxdelete’ functions in mappresstemplate.php. As such, it is possible for a logged-in attacker with minimal permissions,...

Arbitrary file deletion vulnerability in Ridewind Multi-User PHP Statistics System V5.2 backend

Ride Multi-User PHP Statistics is a website traffic statistics system for web store statistics. Ridewind Multi-User PHP Statistics System V5.2 has an arbitrary file deletion vulnerability in the background, which can be exploited by attackers to delete files and cause system reinstallation...

Arbitrary file deletion vulnerability in YCCms (CNVD-2020-26973)

YCCMS is a PHP version of a lightweight website building system. YCCms has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

Net new PHP enterprise website management system standard version (with mobile version) v2.6 exists arbitrary file deletion vulnerability

Netnew PHP enterprise website management system standard version with mobile version is developed using PHP + MYSQL technology and MVC mode, with clear architecture and easy-to-maintain code. Netnew PHP Enterprise Website Management System Standard Edition with Mobile Version v2.6 has an arbitrar...

Arbitrary File Deletion Vulnerability in Environmental Times Enterprise Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System PHP is a commercial system. There is an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

McAfee Endpoint Security Elevation of Privilege Vulnerability (CNVD-2020-24141)

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on...

Arbitrary File Deletion Vulnerability in ETA CMS (CNVD-2020-26404)

ETA CMS is a simple, practical and efficient website builder. ETA CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete configuration files...

Arbitrary File Deletion Vulnerability in Aptar CMS

Aptar CMS is a website management system with PHP+MYSQL technology. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Microsoft Windows Scheduled Task Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege extraction vulnerability exists in Microsoft Windows and Windows Server, which...