CVE-2019-13552

Advantech WebAccess (version 8.4.1 and earlier) contains multiple command-injection vulnerabilities due to improper validation of user-supplied data, impacting the WebAccess Node and related components. The CVE-2019-13552 entry specifically covers command injection that can lead to arbitrary file...

Advantech WebAccess Command Injection Vulnerability

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A command injection vulnerability exists in Advantech WebAccess 8.4.1 and earlier versions, which can be exploited by an attacker to achieve arbitrary file deletion and remote code execution...

WordPress cysteme-finder plugin code issue vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in the WordPress cysteme-finder plugin prior to version 1.4, which stems fro...

Arbitrary File Deletion Vulnerability in BlueCMS

BlueCMS is a professional local portal system developed by open source combination of PHP + MYSQL, focusing on local portal CMS. BlueCMS arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...

Advantech WebAccess Node BwDlgpUp Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within BwDlgpUp.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

Advantech WebAccess Node bwgetval Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwgetval.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

CVE-2016-10965

The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion...

Directory traversal

The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion...

CVE-2016-10965

The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion...

CVE-2019-5956

WonderCMS

Multiple Vulnerabilities in Youmu's Learning Platform

Ltd. is a company that builds institutions' informatized teaching and management support system based on the comprehensive platform of Youmu class online education. There are multiple vulnerabilities in the UMOCL learning platform, which can be exploited by attackers to arbitrarily upload, downlo...

Microsoft Windows AppX Deployment Service Junction Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX...

Arbitrary file deletion

LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion...

Arbitrary file deletion

In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure...

CVE-2019-16132

An issue was discovered in OKLite v1.2.25. framework/admin/tplcontrol.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring...

Arbitrary File Deletion Vulnerability in Fish Leap CMS

Fish CMS is a content management system developed by the official Catfish CMS specifically for enterprise applications. There is an arbitrary file deletion vulnerability in FishCenter CMS, which can be exploited by an attacker to delete arbitrary files...

File Upload, Arbitrary File Deletion Vulnerability in CSCMS

CSCMS is a multi-functional network information management system developed by Chongsheng Network Technology. CSCMS file file upload, arbitrary file deletion vulnerability, an attacker can use this vulnerability to obtain server privileges, delete arbitrary files...

Directory Traversal, Code Execution, Arbitrary File Deletion Vulnerabilities in SongCMS Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS backend directory traversal , code execution , arbitrary file deletion...

Arbitrary File Deletion Vulnerability in PHPSHE Mall System

PHPSHE online shopping mall system has all the basic functions required for e-commerce retail business, providing users with a low-cost, high-efficiency online shopping mall construction program. PHPSHE mall system has an arbitrary file deletion vulnerability, which can be exploited by attackers ...

Arbitrary File Deletion Vulnerability in ShopXO Backend

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO backend arbitrary file deletion vulnerability exists . An attacker can exploit the vulnerability to delete any file with a php suffix...