WP Fastest Cache < 0.9.0.3 - Cross-Site Request Forgery (CSRF) Arbitrary File Deletion

The plugin did not have a CSRF nonce check on the "wpfcdeletecurrentpagecache" action, allowing CSRF attacks against authenticated users to delete arbitrary files, including the wp-config.php file. PoC...

CatfishCMS Backend File Arbitrary Deletion Vulnerability

CatfishCMS is open source and free PHP CMS web content management system. An arbitrary file deletion vulnerability exists in the CatfishCMS backend. An attacker can exploit the vulnerability to delete arbitrary files...

WordPress Merge + Minify + Refresh plugin <= 1.10.6 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by NinTechNet in WordPress Merge + Minify + Refresh plugin versions = 1.10.6. Solution Update the WordPress Merge + Minify + Refresh plugin to the latest available version at least 1.10.7...

Arbitrary file deletion

BabyGekko before 1.2.4 allows PHP file inclusion...

Arbitrary file deletion

A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12...

ThinkPHP Arbitrary File Creation and Deletion Vulnerability

ThinkPHP is a lightweight homegrown PHP development framework created to simplify enterprise-level application development and agile WEB application development. ThinkPHP has an arbitrary file creation and deletion vulnerability, which can be exploited by attackers to create arbitrary files and...

CVE-2015-3150

CVE-2015-3150 affects abrt-dbus in Automatic Bug Reporting Tool (ABRT). Local attackers could delete or change ownership of arbitrary files via the problem directory argument to ChownProblemDir, DeleteElement, or DeleteProblem, indicating a local-privilege and data-integrity impact (C, I) without...

Input validation

Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files...

CVE-2012-4030

Chamilo before 1.8.8.6 does not adequately handle user supplied input by the index.php script, which could allow remote attackers to delete arbitrary files...

CVE-2012-4030

CVE-2012-4030 affects Chamilo before 1.8.8.6, where the index.php input handling is insecure, allowing remote attackers to delete arbitrary files. The issue is described in the NVD entry as a vulnerability in Chamilo that could enable unauthorized file deletion via crafted input. Public reference...

Jamf Pro Code Issue Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. A code issue vulnerability exists in Jamf Pro version 9.x and version 10.x prior to 10.15.1. An attacker could exploit this vulnerability to cause a denial of service, execute code, and/or delete files on the Jamf Pro server...

File Deletion Vulnerability in jianbook

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. jianbook file deletion vulnerability , an attacker can use the vulnerability to delete any file...

CVE-2019-17076

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service DoS, remote code execution RCE, and/or deletion of files on the Jamf Pro server...

Deserialization of untrusted data

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service DoS, remote code execution RCE, and/or deletion of files on the Jamf Pro server...

CVE-2019-17076

CVE-2019-17076 affects Jamf Pro 9.x and 10.x prior to 10.15.1. The issue is deserialization of untrusted data when parsing JSON in several APIs, which can lead to Denial of Service, remote code execution, and/or deletion of files on the Jamf Pro server. Root cause: unsafe JSON deserialization in ...

CVE-2019-17076

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service DoS, remote code execution RCE, and/or deletion of files on the Jamf Pro server...

Arbitrary File Deletion Vulnerability in PESCMS Team 2.3.1

PESCMS Team is an open source team task management system written in PHP. An arbitrary file deletion vulnerability exists in PESCMS 2.3.1, which can be exploited by an attacker to delete arbitrary files after a series of operations...

Unspecified Vulnerability in Multiple HPE Products

HPE SimpliVity 380 Gen 9 and others are a server from Hewlett Packard Enterprise HPE in the United States. A security vulnerability exists in several HPE products. An attacker could exploit the vulnerability to create and delete arbitrary files...

CVE-2020-5513

Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal...

MoMoCMS suffers from arbitrary file deletion vulnerability (CNVD-2020-13576)

MoMoCMS is an enterprise building system developed by php+MySQL. MoMoCMS has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete any file in the system...