UsualToolCMS a_ap***.php file has an arbitrary file deletion vulnerability

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. An arbitrary file deletion vulnerability exists in the UsualToolCMS aap.php file. An attacker can exploit the vulnerability to delete arbitrary files...

SUSE-SU-2019:0585-1 Security update for java-1_8_0-ibm

This update for java-180-ibm to version 8.0.5.30 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl bsc1122293. - CVE-2018-11212: Fixed an issue in allocsarray function in jmemmgr.c bsc1122299. - CVE-2018-1890: Fixed a local privilege...

WordPress WP Fastest Cache plugin <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability found by Sebastian Neef in WordPress WP Fastest Cache plugin versions = 0.8.9.0. Solution Update the WordPress WP Fastest Cache plugin to the latest available version at least 0.8.9.1...

WordPress Fastest Cache 0.8.9.0 Arbitrary File Deletion Exploit

WordPress WP Fastest Cache plugin versions 0.8.9.0 and below suffer from an arbitrary file deletion vulnerability. The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a...

CVE-2019-9662

An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...

CVE-2019-9662

An issue was discovered in JTBCPHP 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring...

CVE-2019-9662

CVE-2019-9662 affects JTBC(PHP) 3.0.1.8, specifically its cache management module. The issue allows deletion of arbitrary files ending with inc.php through the URL parameter: console/cache/manage.php?type=action&action=batch&batch=delete&ids=../, indicating a path-traversal/permission problem. Th...

JTBC (PHP) Access Control Error Vulnerability

JTBC PHP is a PHP-based open source content management system CMS. cache management module is one of the cache management module . An access control error vulnerability exists in the cache management module in JTBC PHP version 3.0.1.8. An attacker can exploit this vulnerability to delete any file...

WordPress WP Fastest Cache 0.8.9.0 Arbitrary File Deletion

The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a directory from which files and directories will be deleted recursively. The vulnerable code path extracts the path...

Arbitrary File Deletion Vulnerability in metinfo Mito System

metinfo mito system is an enterprise website management system with PHP Mysql architecture. The metinfo Mito system has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

DedeCMS V5.7 Arbitrary File Deletion Vulnerability

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. DedeCMS V5.7 arbitrary file deletion...

Debian DSA-4401-1 : wordpress - security update

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting XSS and PHP injections attacks, delete files, leak potentially sensitive data, create posts of unauthorized types, or cause denial-of-service by...

CVE-2019-9015

CVE-2019-9015 affects MOPCMS up to 2018-11-30. A path traversal vulnerability in the “column management” function allows unverified paths to be added to a column, enabling an attacker to delete the corresponding directory when a column is removed, potentially deleting parts or the entire website....

Magento Community Edition 2.0.x < 2.0.16 Multiple Vulnerabilities

Binary data 700416.prm...

CVE-2019-8411

admin/dldata.php in zzcms 2018 2018-10-19 allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal...

Arbitrary file deletion

A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder with a crafted ../ payload...

Advantech WebAccess Arbitrary File Deletion (CVE-2018-7495)

An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations. Successful exploitation results in the deletion of arbitrary files...

Amazon Linux 2 : php-pear (ALAS-2019-1159)

PEAR ArchiveTar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the ArchiveTar class. There are several file operations with $vheader'filename' as parameter such as fileexists, isfile, isdir, etc. When extract is called without a specific prefix path, we can trigger...

VulnCheck KEV: CVE-2019-25296

The WP Cost Estimation plugin for WordPress is vulnerable to arbitrary file uploads and deletion due to missing file type validation in the lfbuploadform and lfbremoveFile AJAX actions in versions up to, and including, 9.642. This makes it possible for unauthenticated attackers to upload...

Medium: php-pear

Issue Overview: PEAR ArchiveTar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the ArchiveTar class. There are several file operations with $vheader'filename' as parameter such as fileexists, isfile, isdir, etc. When extract is called without a specific prefix path, we can...