Two File Deletion Vulnerabilities in tpshop2.0

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . tpshop2.0 There are two file deletion vulnerabilities , allowing attackers to exploit the vulnerability to delete arbitrary files...

CVE-2015-5473

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to 1 upload/updateDriver or 2 upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to 3...

CVE-2015-5473

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to 1 upload/updateDriver or 2 upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to 3...

ourphp background arbitrary file deletion

No description provided by source...

PHPMyWind v5. 4 background arbitrary file deletion

No description provided by source...

NIUSHOP open source mall system with arbitrary file deletion vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system latest version of the existence of arbitrary file deletion vulnerability...

Cisco Prime Collaboration Provisioning Multiple Directory Traversal Vulnerabilities (May 2017)

cisco prime collaboration provisioning is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2015-5609

The CVE-2015-5609 entry describes an absolute path traversal in the WordPress Image Export plugin 1.1, allowing remote attackers to read and delete arbitrary files via a full pathname passed to download.php. Affected component is the WordPress Image Export plugin (version 1.1); root cause is a pa...

Cisco Prime Collaboration Provisioning Software Directory Traversal Vulnerability

Cisco Prime Collaboration Provisioning Software is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. A directory traversal vulnerability...

Cisco Prime Provisioning Multiple Vulnerabilities (May 2017)

cisco prime collaboration provisioning is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-6637

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...

Directory traversal

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...

CVE-2017-6637

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation o...

CVE-2017-6637

Cisco Prime Collaboration Provisioning (PCP) web interface vulnerability CVE-2017-6637 allows an authenticated, remote attacker to delete arbitrary files due to insufficient HTTP request input validation and lack of RBAC enforcement, via directory traversal on the affected system. Core issue: imp...

CVE-2017-6635

CVE-2017-6635 affects Cisco Prime Collaboration Provisioning Software (before Release 12.1). The web interface allows authenticated, remote attackers to delete arbitrary files via crafted HTTP requests that exploit directory traversal and weak RBAC enforcement. The issue is rooted in insufficient...

Cisco Prime Collaboration Provisioning Directory Traversal Arbitrary File Deletion Vulnerability

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A directory traversal arbitrary file deletion vulnerability exists in the web interface of Cisco Prime Collaboration Provisioning, which can be exploited by an authenticated, remote attacker to...

Cisco Prime Collaboration Provisioning Directory Traversal Vulnerability (CNVD-2017-09962)

Cisco Prime Collaboration is a comprehensive video and voice service assurance and management system. A directory traversal vulnerability exists in Cisco Prime Collaboration Provisioning, which can be exploited by a remote attacker to delete arbitrary files on an affected system...

Arbitrary file deletion

DISPUTED Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or wh...

CVE-2017-8769

Facebook WhatsApp Messenger for Android prior to 2.16.323 stores files associated with chats (Audio, Documents, Images, Video, Voice Notes) on the SD card in cleartext, and this persists after the chat is deleted. The root cause described is that files are kept in cleartext on external storage de...

Cisco Prime Collaboration Provisioning Directory Traversal Arbitrary File Deletion Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and...