PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion

Exploit Author: bzyo CVE: CVE-2018-19936 Twitter: @bzyo Exploit Title: PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Date: 12-07-18 Vulnerable Software: PrinterOn Enterprise 4.1.4 Vendor Homepage: https://www.printeron.com/ Version: 4.1.4 Tested On...

Multiple vulnerabilities in Cybozu Remote Service

Overview Cybozu Remote Service provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Upload of arbitrary files in logo setting screen CWE-434 - CVE-2018-16169 Directory traversal in used device management screen CWE-22 - CVE-2018-16170 Directory traversal in client certificates...

Arbitrary file deletion vulnerability in ZZCMS full version

ZZCMS is a free and open source website building system, mainly facing the majority of webmasters. ZZCMS full version of the existence of arbitrary file deletion vulnerability. The vulnerability stems from a problem in the logic of admin/dl.php, which leads to the deletion of arbitrary files from...

JVN#23161885: Multiple vulnerabilities in Cybozu Remote Service

Cybozu Remote Service provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Upload of arbitrary files in logo setting screen CWE-434 - CVE-2018-16169 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2|...

openSUSE Security Update : otrs (openSUSE-2018-1503)

This update for otrs fixes the following issues : Update to version 4.0.33. Security issues fixed : - CVE-2018-19141: Fixed privilege escalation, that an attacker who is logged into OTRS as an admin user cannot manipulate the URL to cause execution of JavaScript in the context of OTRS. -...

Security update for otrs (moderate)

This update for otrs fixes the following issues: Update to version 4.0.33. Security issues fixed: - CVE-2018-19141: Fixed privilege escalation, that an attacker who is logged into OTRS as an admin user cannot manipulate the URL to cause execution of JavaScript in the context of OTRS. -...

HuCart im***. _li***.php file has an arbitrary file deletion vulnerability

HuCart HuCart is an open source enterprise building system. HuCart im. li.php file there are arbitrary file deletion vulnerability , attackers can exploit the vulnerability to delete any file site...

HuCart im***.php file has an arbitrary file deletion vulnerability

HuCart HuCart is an open source enterprise building system. HuCart im.php file exists arbitrary file deletion vulnerability , attackers can exploit the vulnerability to delete any file site...

HuCart fi***.li***.php file has an arbitrary file deletion vulnerability

HuCart HuCart is an open source enterprise building system. HuCart fi.li.php file exists arbitrary file deletion vulnerability , attackers can exploit the vulnerability to delete any file site...

WordPress WP-DBManager plugin <= 2.79.1 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability found by RIPS in WordPress WP-DBManager plugin versions = 2.79.1. Solution Update the WordPress WP-DBManager plugin to the latest available version at least 2.79.2...

CVE-2017-1418

CVE-2017-1418 affects IBM Integration Bus and WebSphere Message Broker, with insecure file permissions on certain files that allow a local attacker to modify or delete them. Affected products/versions per the sources: IBM Integration Bus V10.0.0.0–10.0.0.11 and V9.0.0.0–9.0.0.10; WebSphere Messag...

Code injection

IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9 has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406...

Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)

An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...

GreenCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-00334)

GreenCMS is a content management system CMS based on ThinkPHP. A cross-site request forgery vulnerability exists in GreenCMS version 2.3.0603. A remote attacker can exploit this vulnerability to delete log files with the help of the index.php?m=admin&c=data&a=clear URI...

Cross site request forgery (csrf)

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI...

CVE-2018-19376

An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file via the index.php?m=admin&c=data&a=clear URI...

WordPress File Deletion WooCommerce Plugin Privilege Escalation

A privilege escalation vulnerability exist in WordPress File Deletion WooCommerce Plugin. The vulnerability is due to a lack of validation in file deletion. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Arbitrary File Deletion Vulnerability in ECTouch Backend

ECTouch is a mobile mall online store system launched by Shanghai Shangchuang Network Technology Co. ECTouch backend has an arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files, resulting in system reinstallation...

Multiple directory traversal vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple directory traversal vulnerabilities below. Directory traversal vulnerability due to a flaw in processing parameter of the HTTP request CWE-22 - CVE-2018-0703 Directory traversal vulnerability due to a flaw in processing parameter...

Cybozu Mailwise vulnerable to directory traversal

Overview Cybozu Mailwise provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing parameter of the HTTP request. Yuji Tounai reported this vulnerability to Cybozu, Inc., and Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of it...