zzcms arbitrary file deletion

No description provided by source...

Multiple vulnerabilities in baserCMS

Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2017-10842 Arbitary files may be deleted - CVE-2017-10843 Arbitary PHP code execution - CVE-2017-10844 Shoji Baba reported the vulnerabilities to IPA. JPCERT/CC...

JVN#78151490: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2017-10842 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 7.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5...

Arbitrary file deletion

Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name...

The vulnerability of the DriverFileUploadServlet server servlet in the web application, which is designed for managing and monitoring printing devices and image processing, allows a perpetrator to delete any file.

The vulnerability of the DriverFileUploadServlet web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete any...

The vulnerability of the AddDriverFileServlet servlet in the web application, which is designed for managing and monitoring printing devices and image processing, allows a perpetrator to delete any file.

The vulnerability of the AddDriverFileServlet servlet in a web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability could allow a malicious actor to...

Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Arbitrary File Deletion Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within dbman service, which listens by default on TC...

CVE-2017-11382

Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350...

CVE-2017-11382

Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350...

CVE-2017-11382

Trend Micro Deep Discovery Email Inspector 2.5.1 is affected by CVE-2017-11382 due to a flaw in kdump_setting.php that lacks validation of a user-supplied path, enabling remote, unauthenticated attackers to delete arbitrary files and disable the service. This vulnerability stems from improper fil...

Trend Micro Deep Discovery Email Inspector Denial of Service Vulnerability

Trend Micro Deep Discovery Email Inspector is an email protection device from Trend Micro that can detect and identify undetectable threats in real time and propose solutions. A denial of service vulnerability exists in Trend Micro Deep Discovery Email Inspector version 2.5.1. A remote attacker c...

GLPI front/backup.php file arbitrary file deletion vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in the front/backup.php file in versions...

Trend Micro Deep Discovery Email Inspector kdump_setting Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within kdumpsetting.php. The issue results from the lack of proper...

Code injection

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...

CVE-2017-11183

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...

CVE-2017-11183

GLPI prior to 9.1.5 is affected by CVE-2017-11183: remote authenticated administrators can delete arbitrary files through a crafted file parameter in front/backup.php. Root cause: improper handling of the file parameter leading to arbitrary file deletion. Mitigation: upgrade GLPI to a fixed relea...

CVE-2017-11183

front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter...

Arbitrary file deletion

Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL...

Arbitrary File Deletion

Moodle is vulnerable to arbitrary file deletion. Authenticated attackers can delete arbitrary files through the manage-files button in a text editor because it does not consider the mod/wiki:managefiles capability...

Directory traversal

dapur\apps\appconfig\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter in a type=database request, a different vulnerability than CVE-2017-8853...