PT-2022-19311

Name of the Vulnerable Software and Affected Versions GreenCMS version 2.3.0603 Description The issue allows for arbitrary file deletion. This can be achieved via the "/index.php?m=admin&c=custom&a=plugindelhandle&plugin name=" API endpoint, where the plugin name variable is utilized...

CVE-2022-28058: Improper Limitation of a Pathname to a Restricted Directory

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...

CVE-2022-28918: Undefined Security Weakness

GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...

CVE-2022-28523: Improper Limitation of a Pathname to a Restricted Directory

HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete...

CVE-2022-28059: Improper Limitation of a Pathname to a Restricted Directory

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

HongCMS 路径遍历漏洞

HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS version 3.0.0, which originates from the deletion of arbitrary files via the component /admin/index.php/template/ajax?action=delete...

RubyGems passenger gem allows remote attackers to delete files

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process. Affects both open source and Enterprise versions 4.0.0.beta1, 4.0.0.beta2...

UCMS arbitrary file deletion vulnerability

UCMS is a simple and efficient PHP open source CMS building system. UCMS v1.6 has arbitrary file deletion vulnerability, there is no detailed vulnerability details provided...

CVE-2022-28443

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

CVE-2022-28443

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

CVE-2022-28443

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

Arbitrary file deletion

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

Arbitrary file deletion

UCMS v1.6 was discovered to contain an arbitrary file read vulnerability...

CVE-2022-28443

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

CVE-2022-28443

Technical details on CVE-2022-28443 are not publicly available in the provided documents. The UCMS v1.6 arbitrary file deletion vulnerability is described at high level; monitor for updates and any vendor advisories for affected versions and mitigations.

PT-2022-19032

Name of the Vulnerable Software and Affected Versions UCMS version 1.6 Description The issue allows for arbitrary file deletion. Recommendations For version 1.6, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2022-28443: Undefined Security Weakness

UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability...

UCMS 安全漏洞

UCMS is a simple and efficient PHP open source CMS building system. UCMS v1.6 has arbitrary file deletion vulnerability, there is no detailed vulnerability details provided...

Arbitrary file deletion

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

Arbitrary file deletion

An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an overwrite of files in the web application server...