CVE-2020-21648: Undefined Security Weakness

WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php...

PT-2021-10648

Name of the Vulnerable Software and Affected Versions: WDJA CMS version 1.5.2 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component admin/cache/manage.php. Recommendations: For WDJA CMS version 1.5.2, consider restricting access to the...

in pheditor/pheditor

Description This issue allows an attacker to influence calls to the 'unlink' function and delete arbitrary files. https://github.com/pheditor/pheditor is vulnerable to DoS via Arbitrary file deletion. Proof of concept Vuln variable: $POST'path' Snippet: case 'delete': if isset$POST'path' &&...

CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

Arbitrary file deletion

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

CVE-2020-21014

CVE-2020-21014 affects emlog v6.0.0. The vulnerability is an arbitrary file deletion flaw in admin/plugin.php, arising from insufficient access restriction in the plugin deletion logic. Impact stated in sources is the ability to delete arbitrary files on the server. No exploit vectors or exploit ...

CVE-2020-21014: Undefined Security Weakness

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

PT-2021-10575

Name of the Vulnerable Software and Affected Versions: emlog version 6.0.0 Description: The issue concerns an arbitrary file deletion vulnerability. It is located in the admin/plugin.php file. Recommendations: For emlog version 6.0.0, at the moment, there is no information about a newer version...

Emlog 授权问题漏洞

Emlog is a PHP and MySQL based CMS builder for Emlog personal developers. A license issue vulnerability exists in Emlog, which stems from the product's lack of an effective restriction added to the admin/plugin.php file deletion feature. An attacker can exploit this vulnerability to delete...

Dell SupportAssist < 3.10 Multiple Vulnerabilities (DSA-2021-163)

According to its self-reported version number, the version of Dell SupportAssist Client Consumer is prior to 3.10. It is, therefore, affected by multiple vulnerabilities. - An arbitrary file deletion vulnerability exists due to how Dell SupportAssist handles symbolic links and NTFS junction point...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

Arbitrary file deletion

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...

CVE-2021-41729

CVE-2021-41729 affects BaiCloud-cms v2.5.7, with an arbitrary file deletion vulnerability exploitable via /user/ppsave.php. Connected sources provide the product, vulnerable component (server-side file handling), and impact (arbitrary file deletion). CVSS-3.1 indicates a CRITICAL base score (9.1)...

CVE-2021-41729

BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php...