13465 matches found
WordPress All in One WP Migration plugin <= 7.58 - Directory Traversal to File Deletion on Windows Hosts vulnerability
Directory Traversal to File Deletion on Windows Hosts vulnerability discovered by haidv35 Viettel Cyber Security in WordPress All-in-One WP Migration plugin versions = 7.58. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.59...
CVE-2022-28114: Undefined Security Weakness
DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php...
PT-2022-18819
Name of the Vulnerable Software and Affected Versions DSCMS version 3.0 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the "/controller/Adv.php" API endpoint. Recommendations For DSCMS version 3.0, consider restricting access ...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
Arbitrary file deletion
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2022-22782
The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...
CVE-2021-46424
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2021-46424
The CVE-2021-46424 affects Telesquare TLR-2005KSH 1.0.0. A remote attacker can delete any file (including system files) via a DELETE request due to improper access control. Impact: data loss and potential system instability. Remediation: apply vendor patch/update per Nuclei/PacketStorm references...
Telesquare TLR-2005Ksh 安全漏洞
Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from Telesquare Korea. An arbitrary file deletion vulnerability exists in Telesquare TLR-2005Ksh version 1.0.0, which stems from improper access control. A remote attacker can exploit this vulnerability to delete any file, even internal system...
PT-2022-12700
Name of the Vulnerable Software and Affected Versions Telesquare TLR-2005KSH version 1.0.0 Description The issue allows a remote attacker to delete any file, including system internal files, via a DELETE request. This can be exploited by sending a DELETE request to the affected device...
CVE-2021-46424: Undefined Security Weakness
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request...
CVE-2022-28523
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...
CVE-2022-28059
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
CVE-2022-28058
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
CVE-2022-28918
GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...
CVE-2022-28058
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...