CVE-2022-2638

CVE-2022-2638 affects the WordPress Export All URLs plugin prior to version 4.4. The vulnerability arises from insufficient validation of the path of the CSV file to be removed, enabling high-privilege users to delete arbitrary files on the server. Public sources in the connected documents consis...

CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

Arbitrary file deletion

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-36687

The CVE-2022-36687 entry concerns Ingredients Stock Management System v1.0 with an arbitrary file deletion vulnerability in the component /classes/Master.php?f=delete_img. The root cause is lack of validation for the delete file path, enabling arbitrary file deletion. Documented impacts include h...

CVE-2022-36687

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-36687: Improper Limitation of a Pathname to a Restricted Directory

Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=deleteimg...

CVE-2022-2638: External Control of File Name or Path

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server...

PT-2022-23554 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue allows for arbitrary file deletion via the /classes/Master.php component, specifically through the f parameter set to delete img. Recommendations: For Ingredients Stock...

WordPress WPvivid Backup plugin 0.9.76 - Authenticated Arbitrary File Deletion vulnerability

Authenticated Arbitrary File Deletion vulnerability discovered by WPScan in WordPress WPvivid Backup plugin versions 0.9.76. Solution Update the WordPress WPvivid Backup and Migration plugin to the latest available version at least 0.9.77...

WordPress plugin Export All URLs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Ingredients Stock Management System 路径遍历漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of Ingredients Stock Management System is vulnerable to an arbitrary file deletion vulnerability in component /classes/ Master.php?f=deleteimg lacks validation for the delete...

PT-2022-17822 · WordPress · Export All Urls

Name of the Vulnerable Software and Affected Versions: Export All URLs WordPress plugin versions prior to 4.4 Description: The issue concerns a lack of validation for the file path to be removed on the system, which is supposed to be a CSV file. This could allow high privilege users to delete...

CVE-2021-40285

htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php...

Arbitrary file deletion

htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php...

CVE-2021-40285

htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php...

CVE-2021-40285

htmly v2.8.1 contains an arbitrary file deletion vulnerability in the component \views\backup.html.php. Affected software: htmly 2.8.1. Root cause: arbitrary file deletion via the backup page component. Impact per CVSS: I and A HIGH, with availability impact also HIGH (per NVD metrics). Exploitat...

PT-2022-11210 · Htmly · Htmly

Name of the Vulnerable Software and Affected Versions: htmly version 2.8.1 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component viewsbackup.html.php. There is no information provided about the estimated number of potentially affected devices...

CVE-2021-40285: Improper Limitation of a Pathname to a Restricted Directory

htmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component \views\backup.html.php...