13487 matches found
CVE-2021-41975
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in...
CVE-2021-41975: Improper Authorization
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in...
PT-2021-23463 · Tadtools · Tadtools
Name of the Vulnerable Software and Affected Versions: TadTools affected versions not specified Description: The TadTools special page is vulnerable to authorization bypass, allowing remote attackers to delete arbitrary files in the system without logging in. They can use a specific parameter to...
VMware vSphere Life-cycle Manager File Deletion
The vulnerability of the VMware vSphere Life-cycle Manager, a management tool for virtual infrastructure, related to VMware vCenter Server and VMware Cloud Foundation virtualization platforms, is associated with privilege management errors. Exploiting this vulnerability could allow an attacker to...
CVE-2020-21648
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2020-21648
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
Arbitrary file deletion
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2020-21648
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2020-21648
CVE-2020-21648 affects WDJA CMS v1.5.2 with an arbitrary file deletion vulnerability in admin/cache/manage.php. The issue is documented across multiple sources (NVD/Red Hat/CVE). The root cause details are not provided beyond the vulnerability location; impact is deletion of arbitrary files. CVSS...
CVE-2021-0683
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2021-0683
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Wdja 访问控制错误漏洞
Wdja is a Php-based content management system from the Wdja team. An Access Control Error vulnerability exists in WDJA CMS, which stems from the product not restricting file deletion operations in admin/cache/manage.php. The vulnerability can be exploited to delete arbitrary files. The following...
CVE-2020-21648: Undefined Security Weakness
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...
CVE-2021-0683: Undefined Security Weakness
In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
PT-2021-10648
Name of the Vulnerable Software and Affected Versions: WDJA CMS version 1.5.2 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component admin/cache/manage.php. Recommendations: For WDJA CMS version 1.5.2, consider restricting access to the...
in pheditor/pheditor
Description This issue allows an attacker to influence calls to the 'unlink' function and delete arbitrary files. https://github.com/pheditor/pheditor is vulnerable to DoS via Arbitrary file deletion. Proof of concept Vuln variable: $POST'path' Snippet: case 'delete': if isset$POST'path' &&...
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...