CVE-2021-45348

The CVE-2021-45348 entry concerns SourceCodester Attendance Management System v1.0. An arbitrary file deletion vulnerability is triggered via the csv parameter in admin/pageUploadCSV.php, enabling a Denial of Service (crash). Public records describe the affected component as the web app’s Attenda...

CuppaCMS path traversal vulnerability

CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS v1.0, which stems from the fact that Cuppa CMS v1.0 was found to contain an arbitrary file deletion vulnerability via the unlink function. No details of the vulnerability are currently available...

Attendance Management System 安全漏洞

Attendance Management System is an attendance management system by Razormist personal developer. Attendance Management System v1.0 contains an arbitrary file deletion vulnerability that can be exploited by attackers to cause a denial of service crash...

PT-2022-12331

Name of the Vulnerable Software and Affected Versions SourceCodester Attendance Management System version 1.0 Description An Arbitrary File Deletion issue exists via the csv parameter in "admin/pageUploadCSV.php", which can cause a Denial of Service crash. Recommendations For SourceCodester...

CVE-2021-45348: Undefined Security Weakness

An Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1.0 via the csv parameter in admin/pageUploadCSV.php, which can cause a Denial of Service crash...

Arbitrary File Deletion Vulnerability in Agricultural Water Pricing Reform System of Siltronic Ltd.

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An arbitrary file deletion vulnerability exists in the Agricultural Water Pricing Reform System of Siltronic Technology Limited, which can be exploited by attackers to compromise...

CVE-2021-22823

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21320...

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...

CVE-2021-22823

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21320...

CVE-2021-22805

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...

CVE-2021-22823

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21320...

Schneider Electric Interactive Graphical SCADA System访问控制错误漏洞

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. An access control error vulnerability exists in the Schneider Electric Interactive Graphical...

CVE-2021-22823: Missing Authentication for Critical Function

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21320...

CVE-2021-22805: Missing Authentication for Critical Function

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...

CVE-2022-24647

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

CVE-2022-24647

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

CVE-2022-24647

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

Arbitrary file deletion

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

CVE-2022-24647

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...

CVE-2022-24647

Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...