CVE-2020-19038

CVE-2020-19038 affects Halo version 0.4.3 and is described as a File Deletion vulnerability via the delBackup function. The connected documents consistently identify Halo 0.4.3 as vulnerable to arbitrary file deletion through delBackup, indicating a flaw in the handling of that function. The root...

CVE-2020-19038: Missing Authorization

File Deletion vulnerability in Halo 0.4.3 via delBackup...

Arbitrary File Deletion Vulnerability in Panavision OA E-office

Panavision OA E-office is a professional office software, a working platform for small businesses or teams. An arbitrary file deletion vulnerability exists in Panmicro OA E-office, which can be exploited by an attacker to delete arbitrary files from the server...

PT-2021-10273 · Halo · Halo

Name of the Vulnerable Software and Affected Versions: Halo version 0.4.3 Description: A File Deletion issue exists via the delBackup function. Recommendations: For Halo version 0.4.3, consider restricting access to the delBackup function as a temporary workaround until a patch is available...

Halo 安全漏洞

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 is vulnerable to file deletion. An attacker can use this vulnerability to delete arbitrary files via delBackup...

Arbitrary File Deletion Vulnerability in Xiancheng CMS

Xiancheng CMS is a PHP article management system with PHP+Mysql architecture. Xiancheng CMS arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Guangzhou Tutron Computer Software Development Co., Ltd. is a high-tech enterprise integrating product development, application integration and customer service. There is an arbitrary file deletion vulnerability in the Library Cluster Management System of Guangzhou Tutron Computer Software...

CVE-2021-32000

A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux...

CVE-2020-24146

Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...

CVE-2020-24146

Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...

MuYuCMS suffers from arbitrary file deletion vulnerability (CNVD-2021-51335)

MuYuCMS is an emerging lightweight, public service content management system. MuYuCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Arbitrary File Deletion Vulnerability in qwadmin of Beijing Chave Network Technology Co.

qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin exists arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...

PT-2021-11017

Name of the Vulnerable Software and Affected Versions: CM Download Manager plugin version 2.7.0 Description: The issue allows authorized users to delete arbitrary files and possibly cause a denial of service. This is achieved via the fileName parameter in a deletescreenshot action. Recommendation...

CVE-2020-24146: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in the CM Download Manager aka cm-download-manager plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...

Arbitrary File Deletion Vulnerability in Man City CMS

Man City CMS program is a complete and powerful rapid site building system developed with the core of CI framework and running in PHP MYSQL environment. ManCity CMS has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete files arbitrarily...

Arbitrary File Deletion Vulnerability in CLTPHP

CLTPHP is a PHP content management system and an open source CMS system. CLTPHP has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Cross-site Scripting (XSS) - Stored in projectsend/projectsend

💥 BUG CSRF bug to delete file 💥 SUMMURY during batch delete file there is no csrf token present 💥 STEP TO REPRODUCE 1. vulnerable url is http://localhost/projectsend2/manage-files.php?action=delete&batch=27&batch=31&page=1 .\ Here in this url change file-id to delete and open the url and see file...

Arbitrary File Deletion Vulnerability in phpwcms

phpwcms is an open source web content management system. An arbitrary file deletion vulnerability exists in phpwcms, which can be exploited by an attacker to delete files on the server...

Path Traversal in Dutchcoders transfer.sh

Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files...

Arbitrary File Deletion Vulnerability in HongCMS (CNVD-2021-47696)

HongCMS is a lightweight website system. HongCMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...