13399 matches found
MuYuCMS 路径遍历漏洞
MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS version 2.2 security vulnerability exists , the vulnerability stems from the /accessory/picdel.html component found to contain arbitrary file deletion vulnerability...
CVE-2023-27701: Missing Authorization
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...
CVE-2023-27700
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...
WordPress Easy Media Replace Plugin <= 0.1.3 is vulnerable to Arbitrary File Deletion
Software Easy Media Replace Type Plugin Vulnerable versions = 0.1.3 Fixed in 0.2.0 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2022-46850 Patch priority Medium CVSS severity Medium 8.7 Developer Claim ownership PSID 321ee0c96fa7 Credits Jeong Seong Ho...
Easy Media Replace < 0.2.0 - Author+ File Deletion
The plugin does not validate path of files to be deleted, which could allow users with a role of Author and above to delete files with an allowed extension...
CVE-2023-27700
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...
PT-2023-21297 · Muyucms · Muyucms
Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: The issue is related to an arbitrary file deletion vulnerability. It can be exploited via the component /accessory/picdel.html. Recommendations: For MuYuCMS version 2.2, as a temporary workaround, consider...
PT-2023-21298 · Muyucms · Muyucms
Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the component /database/sqldel.html. Recommendations: For MuYuCMS version 2.2, as a temporary workaroun...
CVE-2023-27701
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...
MuYuCMS 安全漏洞
MuYuCMS is MuYuCMS open source a lightweight open source content management system . MuYuCMS version 2.2 security vulnerabilities , the vulnerability stems from the /database/sqldel.html found to contain arbitrary file deletion vulnerability...
CVE-2023-27700: Improper Limitation of a Pathname to a Restricted Directory
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...
CVE-2023-27700
CVE-2023-27700 affects MuYuCMS v2.2, with an arbitrary file deletion vulnerability exposed via the /accessory/picdel.html component. The issue’s impact is described as high (I/H, A/H) with CVSS‑3.1 base score 8.1, attack vector Network, low attack complexity, privileges required Low, no user inte...
WordPress WP Shamsi Plugin <= 4.3.3 is vulnerable to Arbitrary File Deletion
Software WP Shamsi Type Plugin Vulnerable versions = 4.3.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-0335 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 28e13116883e Credits Lana Codes Required privilege...
CVE-2023-27701
CVE-2023-27701 affects MuYuCMS v2.2 via the /database/sqldel.html component, enabling arbitrary file deletion. The root cause is not detailed beyond the vulnerability being linked to that endpoint, and no official patch/version fix is provided in the connected documents. The CVE’s basic metrics i...
WordPress OoohBoi Steroids for Elementor Plugin <= 2.1.4 is vulnerable to Arbitrary File Deletion
Software OoohBoi Steroids for Elementor Type Plugin Vulnerable versions = 2.1.4 Fixed in 2.1.5 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-0336 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 0eee208c0039 Credits Lana Codes...
CVE-2023-27701
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...
CVE-2023-27700
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...
CVE-2023-25817
CVE-2023-25817 pertains to Nextcloud Server where versions 24.0.0 through 24.0.8 allow a user to escalate permissions and delete files they should only view or download. Root cause details are not explicitly provided in the initial document beyond the vulnerability description, but the fix is cle...
