CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

CVE-2021-46255 affects eyouCMS v1.5.5-UTF8-SP3_1, where an insufficiently filtered filename parameter enables arbitrary file deletion. The attached details specify the root cause as inadequate input filtering in the filename parameter, leading to deletion of arbitrary files. The vulnerability is ...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

PT-2022-12623

Name of the Vulnerable Software and Affected Versions eyouCMS version 1.5.5-UTF8-SP3 1 Description The issue is related to insufficient filtering of the filename parameter, which allows for arbitrary file deletion. Recommendations For version 1.5.5-UTF8-SP3 1, consider restricting access to the...

EyouCms安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms, which originates from eyouCMS V1.5.5-UTF8-SP31 Deletion of arbitrary files due to insufficient parameter...

CVE-2021-46255: Undefined Security Weakness

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2018-15908

It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document. Mitigation Please se...

CVE-2022-0012 Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR age...

Apache JSPWiki < 2.11.0 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-12949

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XDR agent versions prior to 5.0.12 Palo Alto Networks Cortex XDR agent versions prior to 6.1.9 Palo Alto Networks Cortex XDR agent versions prior to 7.2.4 Palo Alto Networks Cortex XDR agent versions prior to 7.3.2...

WordPress WP Ultimate CSV Importer plugin <= 6.4 - Arbitrary Media File Deletion vulnerability

Arbitrary Media File Deletion vulnerability restricted to the uploads folder of the current year/month discovered in WordPress WP Ultimate CSV Importer plugin versions = 6.4. Solution Update the WordPress WP Ultimate CSV Importer plugin to the latest available version at least 6.4.1...

Arbitrary file deletion

An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information...

Arbitrary file deletion

An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigatedownload.php id parameter...

RiteCMS 3.1.0 - Arbitrary File Deletion (Authenticated) Vulnerability

Exploit Title: RiteCMS 3.1.0 - Arbitrary File Deletion Authenticated Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://ritecms.com/ Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip Version: = 3.1.0 Google Dork:...

RiteCMS 3.1.0 Arbitrary File Deletion

Exploit Title: RiteCMS 3.1.0 - Arbitrary File Deletion Authenticated Date: 25/07/2021 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://ritecms.com/ Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip Version: = 3.1.0...

RiteCMS 3.1.0 - Arbitrary File Deletion (Authenticated)

Exploit Title: RiteCMS 3.1.0 - Arbitrary File Deletion Authenticated Date: 25/07/2021 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://ritecms.com/ Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip Version: = 3.1.0...

File Deletion Vulnerability in Configuration King

KingView is the flagship brand in China's equipment monitoring field, featuring full functionality, simplicity, ease of learning and ease of use. KingView has a file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

CVE-2021-25021: Improper Limitation of a Pathname to a Restricted Directory

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin...