13447 matches found
All-in-One WP Migration < 7.59 - Admin+ File Deletion on Windows Hosts via Path Traversal
The plugin is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file which can be exploited by administrative users, and users who have access to the site’s secret key on WordPress instances with Windows...
DESHANG DSCMS 安全漏洞
Deshang DESHANG DSCMS is a PHP and MySQL based CMS enterprise website builder from Deshang, China. A security vulnerability exists in DSCMS v3.0, which was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php...
CVE-2022-28114: Undefined Security Weakness
DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php...
PT-2022-18819
Name of the Vulnerable Software and Affected Versions DSCMS version 3.0 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the "/controller/Adv.php" API endpoint. Recommendations For DSCMS version 3.0, consider restricting access ...
WordPress All in One WP Migration plugin <= 7.58 - Directory Traversal to File Deletion on Windows Hosts vulnerability
Directory Traversal to File Deletion on Windows Hosts vulnerability discovered by haidv35 Viettel Cyber Security in WordPress All-in-One WP Migration plugin versions = 7.58. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.59...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
Arbitrary file deletion
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2022-22782
The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...
CVE-2021-46424
The CVE-2021-46424 affects Telesquare TLR-2005KSH 1.0.0. A remote attacker can delete any file (including system files) via a DELETE request due to improper access control. Impact: data loss and potential system instability. Remediation: apply vendor patch/update per Nuclei/PacketStorm references...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
Telesquare TLR-2005Ksh 安全漏洞
Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from Telesquare Korea. An arbitrary file deletion vulnerability exists in Telesquare TLR-2005Ksh version 1.0.0, which stems from improper access control. A remote attacker can exploit this vulnerability to delete any file, even internal system...
PT-2022-12700
Name of the Vulnerable Software and Affected Versions Telesquare TLR-2005KSH version 1.0.0 Description The issue allows a remote attacker to delete any file, including system internal files, via a DELETE request. This can be exploited by sending a DELETE request to the affected device...
CVE-2021-46424: Undefined Security Weakness
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2022-28523
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...
CVE-2022-28918
GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...
CVE-2022-28523
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...