YXCMS has multiple vulnerabilities

Yxcms is an enterprise building system based on PHP and mysql technology. Yxcms 1.4.6 version exists stored XSS, arbitrary file deletion, file write, SQL injection vulnerability, attackers can exploit the vulnerability to obtain control of the web server...

CVE-2018-1316

The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was...

Schneider Electric Pelco Sarix Professional Arbitrary File Deletion Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67, which originates from the /login/bin/setparam program failing ...

Arbitrary File Deletion Vulnerability in iZhanCMS Version v2.1

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete arbitrary files...

WonderCMS Arbitrary File Deletion Vulnerability

WonderCMS is an open source, fast, small and simple flat file cms. An arbitrary file deletion vulnerability exists in index.php in WonderCMS versions prior to 2.4.1. A remote attacker can exploit this vulnerability to delete arbitrary files via directory traversal...

CVE-2018-7172

Affected software: WonderCMS (index.php) prior to version 2.4.1. Vulnerability: directory traversal can be exploited by remote attackers to delete arbitrary files on the server (CWE-22). Root cause: improper handling of directory paths in index.php allows traversal sequences. Impact: arbitrary fi...

CVE-2018-7172

In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal...

Arbitrary file deletion

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

Arbitrary file deletion

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pgupgrade creates file in current working directory containing the output of pgdumpall -g under umask which was in effect when the user invoked pgupgrade, and not under 0077 which...

Simple Contact Info plugin <= v1.1.9 - Authenticated Arbitrary File Deletion Vulnerability

Recently we ThreatPress discovered authenticated arbitrary file deletion vulnerability in Simple Contact Info plugin. The plugin has 6000+ active installs according to wordpress.org, but it has not been updated in 3 years. In inc/contat-ajax.php, The code in sciajaxdeleteiconcallback function...

Cross site request forgery (csrf)

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

CVE-2018-6656

Z-BlogPHP 1.5.1 has CSRF via zbusers/plugin/AppCentre/appdel.php, as demonstrated by deleting files and directories...

Multi-meter (DuomiCms) movie and television management system admin_template.php file exists any file delete vulnerability

DuomiCms is a video-on-demand system designed for film and television station owners. Multi-meter DuomiCms film and television management system admintemplate.php file there are arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files...

Debian unstable and Debian squeeze Xpdf arbitrary file deletion vulnerability

Debian unstable and Debian squeeze are both free operating systems created by the Debian Project Collaboration with Linux or FreeBSD as the kernel. foo2zjs is one of the printer drivers. xpdf is an open-source PDF reader integrated into it. zxpdf is one of the command script. A security...

CVE-2011-2902

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...

CVE-2011-2902

zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...

CVE-2011-2902

zxpdf in xpdf before 3.02-19 (Debian unstable) and 3.02-12+squeeze1 (Debian squeeze) insecurely deletes temporary files, enabling remote attackers to delete arbitrary files via a crafted .pdf.gz filename. The vulnerability is a file-deletion flaw within zxpdf, not a memory corruption or code-exec...

Arbitrary file deletion vulnerability in YidaCMS Web Management System version JS1.8.0

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file on the website...

QYKCMS update.php page has an arbitrary file deletion vulnerability

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS update.php page exists arbitrary file deletion vulnerability. Allow attackers to exploit the vulnerability to delete arbitrary files, such as deleting install.lck for CMS reloading, hijacking t...

ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure:...