Arbitrary File Deletion Vulnerability in GreenCMS Backend

GreenCMS is an open source content management system written in PHP by Green Shade Studio, which is based on ThinkPHP, the most popular PHP development framework in China. GreenCMS background there are any file deletion vulnerability , attackers can use the vulnerability to delete any file...

Ocean CMS V6.61 Arbitrary File Deletion Vulnerability

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. . Ocean CMS V6.61 exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

Multiple vulnerabilities in PCWAP mobile PC website information management system

PCWAP cell phone PC website information management system is a set of PC and WAP cell phone version of the website can be achieved in the same back-end management of PHP free open-source cell phone station CMS system. PCWAP cell phone PC website information management system has information...

WordPress < 4.9.7 Arbitrary File Deletion Vulnerability

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.9.7. It is, therefore, affected by an arbitrary file deletion vulnerability that can lead to remote code execution. C Tenable Network Security, Inc. include'compat.inc'; if...

CVE-2018-1999020

Open Networking Foundation ONF ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion overwrite. This attack appear to be exploitable vi...

Directory traversal

Open Networking Foundation ONF ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion overwrite. This attack appear to be exploitable vi...

CVE-2018-1999020

Open Networking Foundation ONF ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion overwrite. This attack appear to be exploitable vi...

CVE-2018-1999020

Open Networking Foundation ONF ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion overwrite. This attack appear to be exploitable vi...

Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion Vulnerabilities

Exploit for php platform in category web applications This issue has been reported to the vendor who has already published patches for this issue. https://www.manageengine.com/products/applicationsmanager/issues.html ========================== Advisory: Zoho manageengine Applications Manager...

Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion

This issue has been reported to the vendor who has already published patches for this issue. https://www.manageengine.com/products/applicationsmanager/issues.html ========================== Advisory:Zoho manageengine Applications Manager Reflected XSSVulnerability Author: M3 From DBAppSecurity...

Arbitrary File Deletion Vulnerability in CSCMS of Guilin Chongsheng Network Technology Co.

Cheng's CMS content management system referred to as CSCMS is a multi-functional network information management system developed by Chongsheng Network Technology. There is an arbitrary file deletion vulnerability in CSCMS by Guilin Chongsheng Network Technology Co. An attacker can exploit this...

MODX Revolution Directory Traversal Vulnerability (CNVD-2018-17478)

MODX Revolution is a collection of easy-to-use content management systems CMS and application frameworks. A directory traversal vulnerability exists in /core/model/modx/modmanagerrequest.class.php in MODX Revolution 2.6.4 and earlier versions. An attacker can exploit the vulnerability by deleting...

SemCms website builder 2.7 version exists arbitrary file deletion vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

CVE-2018-6830

CVE-2018-6830 is a directory traversal vulnerability affecting multiple Foscam cameras (e.g., C1 Lite V3, C1 V3, FI9800P V3, FI9821P V3, FI9831P V3, FI9851P V3, and related models) where an unauthenticated attacker can delete arbitrary files by using .. in the URI path. The issue stems from vendo...

WordPress Arbitrary File Deletion Vulnerability Plugged With Patch 4.9.7

On Jun 26 an arbitrary file deletion vulnerability in the WordPress core was publicly disclosed, the vulnerability could allow an authenticated attacker to delete any file and in some cases execute arbitrary code. WordPress is a free, popular, and open-source content management system currently...

FreeBSD : mybb -- vulnerabilities (bfd5d004-81d4-11e8-a29a-00e04c1ea73d)

mybb Team reports : High risk: Image and URL MyCode Persistent XSS Medium risk: Multipage Reflected XSS Low risk: ACP logs XSS Low risk: Arbitrary file deletion via ACP's Settings Low risk: Login CSRF Low risk: Non-video content embedding via Video MyCode C Tenable Network Security, Inc. The...

CVE-2018-13407

A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused...

Arbitrary File Deletion Vulnerability in Feifei Movie Navigation System

FeiFei Film and TV Navigation System FeiFeiCms is a free and open source PHP movie program. FeiFeiCms is vulnerable to arbitrary file deletion. An attacker can exploit the vulnerability to delete arbitrary files...

mybb -- vulnerabilities

mybb Team reports: High risk: Image and URL MyCode Persistent XSS Medium risk: Multipage Reflected XSS Low risk: ACP logs XSS Low risk: Arbitrary file deletion via ACP’s Settings Low risk: Login CSRF Low risk: Non-video content embedding via Video MyCode...

OneFileCMS Arbitrary File Deletion Vulnerability

OneFileCMS is a lightweight CMS system. The system runs on PHP and JavaScript and includes features such as document editing, file uploading and file management. A security vulnerability exists in the onefilecms.php file in OneFileCMS 2017-10-08 and earlier versions. An attacker can exploit the...