PRODSECBUG-2494: Arbitrary file deletion through design layout update

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

PRODSECBUG-2484: Arbitrary file deletion through export data data transfer

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

PT-2019-3550 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to insufficient input validation in the Windows Error Reporting service of Windows operating systems. This can be exploited by an attacker to elevate...

WordPress Arforms Plugin Input Validation Error Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ARforms is a responsive form builder plugin used in it. An input validation error vulnerability exists in the 'arfdeletefile' function ...

PT-2020-02: Reading or deleting arbitrary files in Cisco ASA and Cisco FTD

A vulnerability in WebVPN allows an unauthorized, remote attacker to conduct a denial of service attack against Cisco ASA devices by deleting files on the system. Successful exploitation of this vulnerability may allow attackers to disable Cisco ASA VPN and read some VPN web interface files...

Multiple Vulnerabilities in YXCMS Backend

Yxcms is an enterprise building system based on PHP and mysql technology. YXCMS backend there are disk directory traversal, disk arbitrary file deletion, code execution, arbitrary file upload vulnerability, attackers can use the vulnerability to obtain sensitive information, arbitrary deletion of...

Directory traversal

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

Arbitrary file deletion

Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...

CVE-2019-17073

CVE-2019-17073 affects emlog up to version 6.0.0beta. The vulnerability arises from a directory traversal in admin/template.php, where an authenticated remote user can abuse the tpl parameter (tpl=../) to delete arbitrary files. Impact is partial confidentiality? Actually deletion of arbitrary fi...

Unauthorised File Read Or Deletion

Voyager is vulnerable to unauthorised file access. Any user with access to admin and compass can read or delete any files, allowing an attacker to steal .env file of the application and to sign his own new session and cookie with secret application key or just dropping the database, knowing...

CVE-2019-17050

An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environme...

HkCms has multiple vulnerabilities

HkCms is a free and open source content management system. HkCms has an arbitrary file deletion and command execution vulnerability. Attackers can use this vulnerability to delete .htaccess files , so as to execute scripts to obtain server privileges...

Arbitrary Deletion Vulnerability in HongCMS v4.0 uc_a***.php File

HongCMS is an open source lightweight content management system CMS. HongCMS v4.0 uca.php file contains an arbitrary deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files, resulting in a system reinstallation...

HPESBHF03955 rev.2 - HPE SimpliVity OmniStack, Local and Remote File Modification and Deletion

Potential Security Impact: Local: Creation and Deletion of Arbitrary Files; Remote: Creation and Deletion of Arbitrary Files SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen9 releases from 3.6.2 to 3.7.9 HPE SimpliVity 380 Gen10 releases from 3.7.1 to 3.7.9 H...

WordPress Plugin ARforms 3.7.1 - Arbitrary File Deletion

!/usr/bin/env ruby Exploit Title: WordPress Arforms - 3.7.1 CVE ID: CVE-2019-16902 Date: 2019-09-27 Exploit Author: Ahmad Almorabea Author Website: http://almorabea.net Updated version of the exploit can be found always at : http://almorabea.net/cve-2019-16902.txt Software Link:...

Arbitrary File Deletion Vulnerability in HongCMS (CNVD-2019-40716)

HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...

HongCMS suffers from an arbitrary file deletion vulnerability (CNVD-2019-40717)

HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...

HongCMS suffers from an arbitrary file deletion vulnerability (CNVD-2019-40718)

HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...

YCCMS v3.3 Arbitrary File Deletion Vulnerability

YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

CVE-2019-16902

In the ARforms plugin 3.7.1 for WordPress, arfdeletefile in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname...