CVE-2024-52447 WordPress Contact Page With Google Map plugin <= 1.6.1 - Arbitrary File Deletion vulnerability

Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map allows Path Traversal.This issue affects Contact Page With Google Map: from n/a through = 1.6.1...

CVE-2024-52771

The content management system DedeBIZ version 6.3.0 is susceptible to an arbitrary file deletion vulnerability. This flaw is reachable via the /admin/file_manage_view component. While the technical root cause is not specified, the vulnerability allows for the unauthorized deletion of files. As a ...

PT-2024-16638 · WordPress · Clone

Name of the Vulnerable Software and Affected Versions: The Clone plugin for WordPress versions up to, and including, 2.4.6 Description: The issue allows unauthenticated attackers to inject a PHP Object via deserialization of untrusted input in the recursive unserialized replace function. If a POP...

Palo Alto Networks PAN-OS 10.2.x < 10.2.12 / 11.0.x < 11.0.6 / 11.1.x < 11.1.5 / 11.2.x < 11.2.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.12 or 11.0.x prior to 11.0.6 or 11.1.x prior to 11.1.5 or 11.2.x prior to 11.2.4. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software...

Drupal core - Less critical - Gadget chain - SA-CORE-2024-006

Drupal core contains a potential PHP Object Injection vulnerability that if combined with another exploit could lead to Artbitrary File Deletion. It is not directly exploitable. This issue is mitigated by the fact that in order to be exploitable, a separate vulnerability must be present that allo...

WordPress plugin Clone 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

DedeBIZ 安全漏洞

DedeBIZ is a content management system from Muyun Intelligence DedeBIZ, a Chinese company. A security vulnerability exists in DedeBIZ version v6.3.0, which stems from the presence of an arbitrary file deletion vulnerability...

CVE-2024-52771

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/filemanageview...

PT-2024-35432

Name of the Vulnerable Software and Affected Versions DedeBIZ version 6.3.0 Description The issue is related to an arbitrary file deletion vulnerability. It can be exploited via the /admin/file manage view component. Recommendations For DedeBIZ version 6.3.0, consider restricting access to the...

CVE-2024-52771

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/filemanageview...

CVE-2024-48071

E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to permanently deny service...

Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China-based Weaver. A security vulnerability exists in Weaver e-cology v9 that could allow an authenticated attacker to perform directory traversal and arbitrarily delete files...

WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Opal Woo Custom Product Variation versions = 1.1.3...

WordPress Contact Page With Google Map plugin <= 1.6.1 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Contact Page With Google Map versions = 1.6.1...

WordPress Opal Woo Custom Product Variation Plugin <= 1.1.3 is vulnerable to Arbitrary File Deletion

Software Opal Woo Custom Product Variation Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2024-52444 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID aa758dfd0ef1 Credits...

WordPress Contact Page With Google Map Plugin <= 1.6.1 is vulnerable to Arbitrary File Deletion

Software Contact Page With Google Map Type Plugin Vulnerable versions = 1.6.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-52447 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 5441375409ba Credits Mika Required...

ManageEngine Endpoint Central < 11.3.2416.22 , 11.3.2428.x < 11.3.2428.10, 11.3.2435.x < 11.3.2435.1 Arbitrary File Deletion vulnerability

The version of ManageEngine Endpoint Central installed on the remote Windows host is either prior to 11.3.2416.22, 11.3.2428.10 or 11.3.2435.1. It is,therefore, affected by a Arbitrary File Deletion vulnerability. For more information, consult the vendor advisory. Note that Nessus has not tested...

CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...

CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0...

CVE-2024-2552 PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall...