CVE-2020-36728

CVE-2020-36728 concerns the WordPress Adning Advertising plugin. Public docs consistently describe unauthenticated path traversal that can delete arbitrary files (up to version 1.5.5, with some sources indicating issues up to 1.5.5 or 1.5.6). Nuclei templates also flag an arbitrary file upload vu...

CVE-2023-33604

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

CVE-2023-33604

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

CVE-2023-33604

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

Arbitrary file deletion

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

Arbitrary file deletion

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

WordPress Plugin Adning Advertising 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Adning Advertising has a path...

CVE-2023-33604

CVE-2023-33604 affects Imperial CMS v7.5. The vulnerability is an arbitrary file deletion issue via the DelspReFile function in the endpoint /sp/ListSp.php, exploitable by a crafted POST request. Documented impact includes high integrity and availability risks (CVSS v3.1: 9.1, I/H). Exploitation ...

CVE-2023-33604

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

CVE-2023-33604: Undefined Security Weakness

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

CVE-2020-36728: Improper Limitation of a Pathname to a Restricted Directory

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site...

Imperial CMS 安全漏洞

Imperial CMS Imperial CMS is an open source website management system from Imperial CMS, a Chinese company. A security vulnerability exists in Imperial CMS version 7.5, which originates from an arbitrary file deletion vulnerability in the function DelspReFile...

CVE-2023-33604

Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request...

PT-2023-11870 · WordPress · Adning Advertising Plugin

Name of the Vulnerable Software and Affected Versions: Adning Advertising plugin for WordPress versions up to, and including, 1.5.5 Description: The issue allows unauthenticated attackers to delete arbitrary files via path traversal, potentially leading to a full control takeover of a site...

PT-2023-24403 · Unknown · Imperial Cms

Name of the Vulnerable Software and Affected Versions: Imperial CMS version 7.5 Description: The issue allows for arbitrary file deletion via the DelspReFile function in the /sp/ListSp.php API endpoint. Attackers can exploit this by sending a crafted POST request to the vulnerable endpoint...

CVE-2023-29152: Improper Authorization

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account...

CVE-2023-2909

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below...

CVE-2023-2909

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below...

Design/Logic Flaw

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below...

CVE-2023-2909 A Directory traversal vulnerability was found on EZ Sync service of ADM

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below...