CVE-2020-28145

The CVE-2020-28145 entry concerns WUZHI CMS (wuzhicms) version 4.0.1, with an arbitrary file deletion vulnerability exploitable via coreframe/app/attachment/admin/index.php that can lead to exposure of sensitive information. The connected sources consistently describe the affected component and t...

CVE-2021-33724

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

CVE-2021-33724

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

Arbitrary file deletion

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

CVE-2021-33724

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

Design/Logic Flaw

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

CVE-2021-33725

CVE-2021-33725 affects Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1). The vulnerability is a path traversal issue where the system allows deleting arbitrary files/directories under a user-controlled path and does not reliably ensure the relative path stays within the intended target dire...

CVE-2021-33724

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

CVE-2021-33724

Siemens SINEC NMS is affected by CVE-2021-33724 (all versions prior to 1.0 SP2 Update 1) due to an Arbitrary File Deletion vulnerability that could permit deletion of arbitrary files or directories under a user-controlled path. The vulnerability is documented across multiple sources (NVD, Red Hat...

CVE-2020-28145: Exposure of Resource to Wrong Sphere

Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app\attachment\admin\index.php, which allows attackers to access sensitive information...

PT-2021-20299

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A vulnerability has been identified that contains an Arbitrary File Deletion issue, which possibly allows the deletion of an arbitrary file or directory under a user-controlled path...

CVE-2021-33724: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system contains an Arbitrary File Deletion vulnerability that possibly allows to delete an arbitrary file or directory under a user controlled path...

PT-2021-20300

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A vulnerability has been identified that allows the deletion of arbitrary files or directories under a user-controlled path. The affected system does not correctly check if the relati...

Siemens SINEC NMS 路径遍历漏洞

SINEC NMS, a network management system from Siemens for monitoring and managing industrial networks, is vulnerable to arbitrary file deletion in versions prior to SINEC NMS 1.0 SP2 Update 1. An attacker could use this vulnerability to delete arbitrary files or directories in the user control path...

PT-2021-8207

Name of the Vulnerable Software and Affected Versions Draytek VigorConnect version 1.6.0-B3 Description The issue is related to a lack of access control in the software for monitoring, managing, and configuring VigorAP access points and VigorSwitches switches in the local network. An arbitrary fi...

CVE-2021-33725: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory...

PT-2021-11449

Name of the Vulnerable Software and Affected Versions: wuzhicms version 4.0.1 Description: An arbitrary file deletion issue was found, allowing attackers to access sensitive information through the coreframeappattachmentadminindex.php file. Recommendations: For wuzhicms version 4.0.1, consider...

WUZHI CMS 安全漏洞

Wuzhi WUZHI CMS is a PHP and MySQL based open source content management system CMS from Wuzhi. WUZHI CMS has a security vulnerability, the vulnerability was discovered through coreframeappattachmentadminindex.php arbitrary file deletion vulnerability, the vulnerability allows attackers can be...

Authorization

TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in...

CVE-2021-41975

TadTools TadTools Special Page vulnerability is an authorization bypass that allows remote attackers to delete arbitrary files without logging in by using a specific parameter. The CVE entry describes this without requiring login, enabling potential remote impact (CVE-2021-41975). Connected sourc...