CVE-2022-30367

Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=deleteimg...

Arbitrary file deletion

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

Arbitrary file deletion

Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=deleteimg...

CVE-2022-30375

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=deleteimg...

CVE-2022-30375

Vulnerability summary (CVE-2022-30375): affected product is Sourcecodester Simple Social Networking Site v1.0. The issue allows deletion of files via the endpoint /sns/classes/Master.php?f=delete_img, as described in multiple sources. The NVD entry lists CVSSv3.1 base score 6.5 (Network, Low atta...

CVE-2022-30367

Affected product: Air Cargo Management System v1.0. The CVE describes a vulnerability in which an attacker can delete files via the endpoint /acms/classes/Master.php?f=delete_img. This is the only concrete detail available across the provided documents; the root cause, affected components, and sp...

CVE-2022-30367

Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=deleteimg...

GHSA-44XP-WJ24-9XXJ Moodle allows attackers to delete files

The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary files by using a manage-files button i...

GHSA-44P8-C3WV-F28R Directory Traversal in Studio 42 elFinder

Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue...

Simple Social Networking Site 安全漏洞

Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by an attacker to delete arbitrary files...

Trend Micro Maximum Security 后置链接漏洞

Trend Micro Maximum Security is a set of computer security protection software from Trend Micro. The software includes virus detection, malware protection, and authentication protection. Trend Micro Maximum Security suffers from a back-link vulnerability that originates from an insecure link trac...

Covid-19 Travel Pass Management System 安全漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A security vulnerability exists in the Covid-19 Travel Pass Management System that originates in...

PT-2022-20080

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for file deletion via the /sns/classes/Master.php?f=delete img API endpoint. This endpoint is vulnerable to exploitation, potentially leading to unauthorized...

PT-2022-20102

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0 Description The issue allows for file deletion via the "/ctpms/classes/Master.php?f=delete img" API endpoint. This endpoint is vulnerable to file deletion attacks. Recommendations For Covid-19...

WordPress All-in-One WP Migration Plugin <= 7.58 Arbitrary File Deletion Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

PT-2022-20084

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue allows for file deletion via the /vloggers merch/classes/Master.php?f=delete img API endpoint. This endpoint is vulnerable to file deletion attacks, potentially allowing unauthorized...

PT-2022-17388

Name of the Vulnerable Software and Affected Versions BlogEngine.NET version 3.3.8.0 Description The issue allows attackers to delete files within the web server root directory via a crafted HTTP request. This is an arbitrary file deletion vulnerability. Recommendations For BlogEngine.NET version...

CVE-2022-30408: Undefined Security Weakness

Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=deleteimg...

CVE-2022-30381: Undefined Security Weakness

Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggersmerch/classes/Master.php?f=deleteimg...

CVE-2022-25591: Improper Limitation of a Pathname to a Restricted Directory

BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...