CVE-2022-28523

CVE-2022-28523 affects HongCMS 3.0.0. The vulnerability allows arbitrary file deletion through the admin component at /admin/index.php/template/ajax?action=delete. The issue is described as a file-deletion capability introduced by this endpoint, leading to potential impact on confidentiality/inte...

CVE-2022-28523

HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...

CVE-2022-28523

HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...

CVE-2022-28059

CVE-2022-28059 affects Verydows v2.0 with an arbitrary file deletion vulnerability via \backend\database_controller.php. Connected documents confirm the same flaw across sources, stating an attacker can delete arbitrary files through the referenced path. CVSSv3.1 vectors indicate network access, ...

CVE-2022-28058

CVE-2022-28058 affects Verydows v2.0 and enables arbitrary file deletion via the path backend\file_controller.php. The NVD entry reports CVSSv3.1 impact: Confidentiality NONE, Integrity HIGH, Availability HIGH (base score 8.1); exposure via NETWORK with low attack complexity, no user interaction ...

CVE-2022-28058

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...

CVE-2022-28059

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

GreenCMS 安全漏洞

GreenCMS is a content management system CMS developed on ThinkPHP. GreenCMS version 2.3.0603 has a security vulnerability, the vulnerability stems from the existence of arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...

HongCMS 路径遍历漏洞

HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS version 3.0.0, which originates from the deletion of arbitrary files via the component /admin/index.php/template/ajax?action=delete...

PT-2022-18785

Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue allows for arbitrary file deletion via the backend/database controller.php endpoint. This could potentially lead to significant disruptions or data loss. Recommendations For Verydows version 2.0,...

Verydows 路径遍历漏洞

Verydows is a lightweight open source e-commerce management system developed using the PHP language . Verydows v2.0 has a security vulnerability , an attacker can ackenddatabasecontroller.php for arbitrary file deletion...

Verydows 路径遍历漏洞

Verydows is a lightweight open source e-commerce management system developed using the PHP language . Verydows v2.0 has a security vulnerability , the attacker can ackendfilecontroller.php for arbitrary file deletion...

PT-2022-18784

Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue allows for arbitrary file deletion via the file controller.php endpoint. This is a significant concern as it could lead to data loss or system compromise. Recommendations For Verydows version 2.0,...

PT-2022-19311

Name of the Vulnerable Software and Affected Versions GreenCMS version 2.3.0603 Description The issue allows for arbitrary file deletion. This can be achieved via the "/index.php?m=admin&c=custom&a=plugindelhandle&plugin name=" API endpoint, where the plugin name variable is utilized...

CVE-2022-28058: Improper Limitation of a Pathname to a Restricted Directory

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...

CVE-2022-28918: Undefined Security Weakness

GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...

CVE-2022-28523: Improper Limitation of a Pathname to a Restricted Directory

HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...

CVE-2022-28059: Improper Limitation of a Pathname to a Restricted Directory

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

PT-2022-19063

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue allows for arbitrary file deletion. This can be achieved via the component /admin/index.php/template/ajax?action=delete. Recommendations For HongCMS version 3.0.0, as a temporary workaround, consider...

RubyGems passenger gem allows remote attackers to delete files

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process. Affects both open source and Enterprise versions 4.0.0.beta1, 4.0.0.beta2...