13481 matches found
CVE-2021-24761 Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF
The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server...
PT-2022-9457 · WordPress · Error Log Viewer
Name of the Vulnerable Software and Affected Versions: Error Log Viewer WordPress plugin versions prior to 1.1.2 Description: The issue concerns a lack of nonce check when deleting a log file and the absence of path traversal prevention. This could allow attackers to make a logged-in admin delete...
FortiWeb - arbitrary file/directory deletion
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiWeb management interface may allow an authenticated attacker to perform an arbitrary file and directory deletion in the device filesystem...
WordPress plugin Error Log Viewer 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in...
CVE-2022-24218: Undefined Security Weakness
An issue in /admin/deleteimage.php of eliteCMS v1.0 allows attackers to delete arbitrary files...
PT-2022-6130
Name of the Vulnerable Software and Affected Versions FortiWeb versions 5.8.x through 6.4.1 FortiWeb versions 6.0.x through 6.3.15 Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This vulnerability...
PT-2022-16540
Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0 Description An issue in the "/admin/delete image.php" endpoint of eliteCMS allows attackers to delete arbitrary files. Recommendations For eliteCMS version 1.0, consider restricting access to the "/admin/delete image.php"...
CVE-2022-22262
ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before deletion, an unauthenticated local attacker can create an unexpected symbolic link to system file pat...
PT-2022-2272 · Mcafee · Mcafee Total Protection
Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.43 Description: A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows, allowing a local user to gain privilege elevation and perform an arbitrary...
in microweber/microweber
Description In the Microweber CMS, there are two endpoints that can be used together to get local file inclusion vulnerability. 1. /api/BackupV2/upload?src=/etc/passwd 2. /api/BackupV2/download?file=passwd When logged in as administrator, we can upload any readable file from the operating system...
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
Arbitrary file deletion
Authenticated admin+ Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin versions = 4.4.6. The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &downloadablefileurls0 parameter data. It's also...
Arbitrary file deletion
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
Arbitrary file deletion
A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...
CVE-2022-23456
CVE-2022-23456 relates to HP Support Assistant and is described in multiple sources as a potential arbitrary file deletion vulnerability. The connected Red Hat/EU ENISA/Nessus entries corroborate the issue title but do not introduce new technical details beyond what HP documents state. The HP adv...
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
HP Support Assistant 安全漏洞
HP Support Assistant is a solution from Hewlett-Packard HP that provides support for PCs and printers, etc. HP Support Assistant is vulnerable to arbitrary file deletion, which could be exploited by attackers to delete arbitrary files...