CVE-2019-1010148

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

Code injection

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

Sql injection

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

Remote code execution

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...

CVE-2019-1010152

CVE-2019-1010152 affects ZZCMS (version 8.3 and earlier). The vulnerability is in user/manage.php (lines 31–80) and is described as a file-delete-to-code-execution issue, with the impact stated as getshell. Other connected records reinforce the same affected component and impact, without providin...

CVE-2019-1010152

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80...

CVE-2019-1010150

zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php...

CVE-2019-1010150

ZZCMS version 8.3 and earlier is affected by a vulnerability in the /user/zssave.php component that allows Code Execution via File Delete, effectively enabling an attacker to obtain a shell (getshell). This CVE (CVE-2019-1010150) is documented with risk details indicating network-based access and...

CVE-2019-1010149

The CVE-2019-1010149 entry affects ZZCMS, specifically versions 8.3 and earlier, due to a vulnerability in the user/licence_save.php component that can lead to File Delete to Code Execution. Impact is described as code execution within ZZCMS. Documents do not provide exploitation details, affecte...

CVE-2019-1010149

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...

CVE-2019-1010148

zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

Code injection

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php...

CVE-2019-1010151

CVE-2019-1010151 affects zzcms zzmcms ≤ 8.3. The vulnerability is in the /user/ppsave.php component, described as “File Delete to getshell,” with the impact being getshell. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH); attack vector is network, no authenticati...

WordPress Simple File List plugin <= 3.2.4 - Authenticated Arbitrary File Delete vulnerability

Authenticated Arbitrary File Delete vulnerability found by Admavidhya N in WordPress Simple File List plugin versions = 3.2.4. Solution Update the WordPress Simple File List plugin to the latest available version at least 3.2.5...

Simple File List Plugin <= 3.2.4 - Authenticated Arbitrary File Delete

Arbitrary File Delete exist in Simple File List Plugin v 3.2.4 or below Authentication Required: Yes...

Ultimate Member Plugin for WordPress < 2.0.46 Multiple Vulnerabilities

The WordPress Ultimate Member Plugin installed on the remote host is affected by multiple vulnerabilities : - An arbitrary file read and delete vulnerability. - A Cross-Site Scripting XSS vulnerability exists due to improper validation of user-supplied input in admin dashboard. - A Cross-Site...

Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation Exploit

Exploit for windows platform in category local exploits Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP Platform: Windows 10 1803 and 1809. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m...