HPE BSM Platform Application Performance Management System Health Arbitrary File Deletion Vulnerability

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A security vulnerability exists in HPE BSM Platform Application Performance Management System Health versions 9.26,...

Arbitrary File Deletion Vulnerability in MOMOCMS

MoMoCMS is an enterprise building system developed by php+MySQL. An arbitrary file deletion vulnerability exists in the MOMOCMS 'unlink' function. Due to obtaining the within to be deleted via $GET'file' allows an attacker to delete database files backed up by the administrator...

Jtbccms V1.0 'jtbc_cms_admin_manage_delete_filedisp()' function has a file deletion vulnerability

Jtbccms is a website system that can expand and clone existing modules. Jtbccms version 1.0 'jtbccmsadminmanagedeletefiledisp' function has a file deletion vulnerability. Due to receiving filepath variable to do iicstr function for adslashes filtering, the code conversion can be directly deleted ...

WordPress: [Buddypress] Arbitrary File Deletion through bp_avatar_set

Hi, The bpavatarset action in BuddyPress when cropping avatars allows an attacker to arbitrarily delete a file the webserver can delete through the 'originalfile' parameter. For example: Create a user on a Buddypress-powered Wordpress instance any user is OK, doesn't need to be admin, just needs ...

NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion

NUUO Arbitrary File Deletion Vulnerability Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: ================================================================== Tested on: GNU/Linux 3.0.8 armv7l GNU/Linux 2.6.31.8 armv5tel lighttpd/1.4.28 PHP/5.5.3 Vulnerability discovered...

kingcms任意php文件删除（可截断时升级为任意文件删除 ）

简要描述： 设计不当导致任意php文件删除 详细说明： 漏洞文件：global.php 好像是所有php文件都会调用该文件，该文件如下代码 //当cachepath值被提交过来的时候，删除对应的临时缓存文件 if!empty$POST'cachepath' $cachepath=ROOT.PATHCACHE.'/'.$POST'cachepath'.'.php'; ifisfile$cachepath unlink$cachepath;...

up.time 7.5.0 - Arbitrary File Disclose and Delete

up.time 7.5.0 - Arbitrary File Disclose and Delete up.time 7.5.0 Arbitrary File Disclose And Delete Exploit Vendor: Idera Inc. Product web page: http://www.uptimesoftware.com Affected version: 7.5.0 build 16 and 7.4.0 build 13 Summary: The next-generation of IT monitoring software. Desc: Input...

Mandriva Linux Security Advisory : xymon (MDVSA-2013:213)

Updated xymon package fixes security vulnerability : A security vulnerability has been found in version 4.x of the Xymon Systems Network Monitor tool The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon xymondrrd. File deletion is done with the...

phpcms 2 0 0 8 sp4 explosive paths and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net

A page, not as fault-tolerant processing result in the explosion path, while the filter is not strict lead to a malicious attacker can delete the website of any of the files corpandresize/config. inc. php definition: $tmp = $COOKIE'tmp'; define"TMPPATH", $tmp; In corpandresize/process. php with t...

Golden FTP Server 4.30 File Deletion Vulnerability

No description provided by source. Exploit Title: Golden FTP Server File Deletion Vulnerability Date: 18.11.2009 Author: sharpe Software Link: http://www.goldenftpserver.com/download.html Version: 4.30 Free and Professional Tested on: Windows XP SP3 CVE : if exists Code :...

Simple PHP Blog 0.4.0 Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Simple PHP...

CVE-2009-1295

CVE-2009-1295 affects Apport crash reporter in Ubuntu 8.04/8.10/9.04 where the crash-report directory is not cleaned properly, allowing local users to delete arbitrary files via unspecified vectors. The issue is confirmed by multiple connected sources: Ubuntu USN-768-1 notes the affected Ubuntu r...

Silentum Uploader 1.4.0 - Remote File Deletion

Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we can alter the path of files to be...

CVE-2008-4964

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any- temporary file...

DEBIAN-CVE-2008-4640

The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to delete arbitrary files via vectors involving a modified input filename in which 1 a final "z" character is replaced by a "t" character or 2 a final "t" character is replaced by a "z" character...

Arbitrary file deletion

alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...

Power articles system arbitrary file delete vulnerability-exposure-vulnerability warning-the black bar safety net

Because their website is continuously being maliciously hacked into twice, from the IIS log seen are“script injection”to blame, this only started to pay attention to script security. A few days ago a friend let me test his website's security situation, so they try their hand, the results actually...

CVE-2003-1073

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. dot dot sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes pla...

Wget < 1.8.3 Rogue FTP Site File Deletion

Binary data 1744.prm...

EarthStation 5 - Search Service Remote File Deletion

EarthStation 5 - Search Service Remote File Deletion source: https://www.securityfocus.com/bid/8753/info It has been reported that EarthStation 5 is prone to a file deletion vulnerability that may allow a remote attacker to delete arbitrary files on a vulnerable system. The problem is reported to...