13478 matches found
CVE-2022-24647
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
Arbitrary file deletion
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
CVE-2022-24647
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
CVE-2022-24647
Cuppa CMS v1.0 is affected by an arbitrary file deletion vulnerability triggered by the unlink() function. The provided documents do not specify the root cause details, affected file paths, or a remediation/patch. No exploitation details are included. Monitor for updates or vendor advisories in t...
CVE-2022-24647
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
Path Traversal in pimcore/pimcore
Description The application doesn't perform a check/filter against the value of "importFile" parameter at endpoint "/admin/translation/import". After the API is executed, PHP unlink function will proceed to delete the file. Proof of Concept - Step 1: Login as admin at...
CVE-2022-24647: Improper Limitation of a Pathname to a Restricted Directory
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
PT-2022-16773
Name of the Vulnerable Software and Affected Versions Cuppa CMS version 1.0 Description The issue is related to an arbitrary file deletion vulnerability via the unlink function. Recommendations For Cuppa CMS version 1.0, as a temporary workaround, consider restricting the use of the unlink functi...
CuppaCMS 路径遍历漏洞
CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS v1.0, which stems from the fact that Cuppa CMS v1.0 was found to contain an arbitrary file deletion vulnerability via the unlink function. No details of the vulnerability are currently available...
DRUPAL-CONTRIB-2022-023
This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view under the scenario unauthenticated user knows path to visit the view and can attempt to delete files which results in duplicate files being created. To mitigate this issue without...
iTunesRPC-Remastered Path Traversal Vulnerability
iTunesRPC-Remastered is a rich discordant state application used with iTunes and Apple Music. iTunesRPC-Remastered suffers from a path traversal vulnerability that stems from iTunesRPC-Remastered not properly sanitizing user input for file deletion. An attacker could exploit this vulnerability to...
HP Support Assistant Arbitrary File Deletion Vulnerability
HP Support Assistant is a solution from Hewlett-Packard HP that provides support for PCs and printers, etc. HP Support Assistant is vulnerable to arbitrary file deletion, which could be exploited by attackers to delete arbitrary files...
Improper Access Control in liukuo362573/yishaadmin
Description https://www.github.com/liukuo362573/yishaadmin has an endpoint "/admin/File/DeleteFile" that allows deleting files without authentication. Root-cause Server doesn't check user's permission when attacker access the endpoint. After that, server will directly call delete function with th...
CVE-2022-23609
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible...
Arbitrary file deletion
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible...
CVE-2022-23609
CVE-2022-23609 affects iTunesRPC-Remastered, a Windows Discord Rich Presence utility. Multiple sources describe a path traversal vulnerability where improper sanitization of user input enables file deletion, constrained only by process permissions. Connected Red Hat, CNVD/CNNVD, OSV, CVE records ...
CVE-2022-23609 Path traveresal in iTunesRPC-Remastered
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible...
CVE-2022-23609
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible...
CVE-2022-23609 Path traveresal in iTunesRPC-Remastered
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize user input used to remove files leading to file deletion only limited by the process permissions. Users are advised to upgrade as soon as possible...