74CMS 个人版V3.3(<=2013111)后台任意文件删除漏洞

No description provided by source...

Arbitrary file deletion

IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...

Advantech WebAccess Dashboard Viewer addFolder Directory Traversal Arbitrary File Deletion Denial of Service Vulnerability

This vulnerability allows remote attackers to deny service to all users on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WebAccess Dashboard Viewer. Insufficient validation within the addFolder...

Deleting a vDisk version does not delete the physical version file

Deleting a vDisk version does not delete the version's physical file...

Arbitrary file deletion

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-.jar file and the "Groovy variant in 'ysoserial'"...

Borland AccuRev SaveContentServiceImpl Servlet Directory Traversal

A denial of service and an information disclosure vulnerability exists in the Borland AccuRev. A remote, unauthenticated attacker can exploit this weakness in the product to read files or to delete an arbitrary file on the system. Successful exploitation of this vulnerability will result in eithe...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to delete arbitrary files.

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, are related to deficiencies in access control for certain functions. Exploiting these vulnerabilities could allow an...

Adobe Reader Multiple Vulnerabilities - 01 (Oct 2015) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader Multiple Vulnerabilities - 01 (Oct 2015) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

KPPW最新版一处函数七处注入附送后台任意文件删除两枚加注入一枚

简要描述： SQL. 详细说明： 问题出现在 \lib\sys\kekeshopreleaseclass.php 的saveserviceobj函数中 部分代码如下 public function saveserviceobj$releaseinfo = array, $objname global $kekezu; if $releaseinfo 'step1' == 'step1' if $POST 'fileid1' $fileIdArr = explode'|', $POST 'fileid1'; ifisarray$fileIdArr $fileIdStr =...

用友某集团平台存在设计缺陷可任意删除文件致系统崩溃

简要描述： 任意删除文件 详细说明： 目标系统：http://ufsdp.ufida.com/ 因为系统的logo被我测试时删除了，所以界面看起来有点丑 这一切都源于扫描器发现的一个文件 http://ufsdp.ufida.com/UploadFile.aspx 漏洞证明： UploadFile.aspx经过测试没法上传shell，但是我发现上传后，会出现已上传文件的列表，以及删除文件的X 即访问如下链接就可以达到删除logo的目的 http://ufsdp.ufida.com/UploadFile.aspx?d=../../Images/logo.gif 所以，如果访问...

Adobe Reader/Acrobat Arbitrary File Deletion Vulnerability

Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. Adobe Reader/Acrobat Arbitrary File Deletion vulnerability allows attackers to synchronize the deletion of arbitrary files through Adobe cooperation...

CVE-2015-7829

Summary (CVE-2015-7829) : Adobe Reader and Acrobat on Windows are affected by a flaw in how they handle junctions in the Synchronizer directory, allowing an attacker to delete arbitrary files via Adobe Collaboration Sync. Affected products include Adobe Reader/Acrobat 10.x up to 10.1.16 and 11.x ...

Adobe Reader Arbitrary File Deletion Sandbox Escape Vulnerability

This vulnerability allows local attackers to delete arbitrary files on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Ajax Load More <= 2.8.1.1 - Authenticated File Upload & Deletion

Authenticated file upload in file ajax-load-more/admin/admin.php file, in the function almsaverepeater. The variable $f is set to a predictable PHP file path, and then the content of the variable $c is written into that file. The following code proves that this second variable is also set from...

Ajax Load More <= 2.8.1.1 - Authenticated File Upload & Deletion

Authenticated file upload in file ajax-load-more/admin/admin.php file, in the function almsaverepeater. The variable $f is set to a predictable PHP file path, and then the content of the variable $c is written into that file. The following code proves that this second variable is also set from...

Moodle 2.7.x < 2.7.10 / 2.8.x < 2.8.8 / 2.9.x < 2.9.2 Multiple Vulnerabilities

Binary data 8969.prm...

Drupal OSF Module Arbitrary File Deletion Vulnerability

Drupal is a free and open source content management system developed in PHP. A security vulnerability exists in the Drupal OSF module, which can be exploited by remote attackers to delete arbitrary files when the OSF Ontology and OSF Import modules are enabled in the program...

CVE-2015-7234

The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote attackers to delete arbitrary files via unspecified vectors...

CVE-2015-7234

The vulnerability CVE-2015-7234 affects the Drupal OSF module (7.x-3.x) prior to 7.x-3.1 when the OSF Ontology and OSF Import modules are enabled. A user-assisted remote attacker can delete arbitrary files via unspecified vectors. The issue is mitigated by upgrading to OSF 7.x-3.1 (as documented ...