CVE-2020-36005

AppCMS 2.0.101 in /admin/app.php contains an arbitrary file deletion vulnerability. The CVE-2020-36005 entry indicates an ability for an attacker to delete arbitrary files on the site. Connected documents confirm the same flaw across CNVD/CNNVD listings, but do not provide concrete exploit detail...

PT-2021-11901

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/app.php. Recommendations: For AppCMS version 2.0.101, as a temporary workaround,...

CVE-2020-36006: Undefined Security Weakness

AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

Redhat redhat-certification access control error vulnerability (CNVD-2021-40155)

Red Hat Certification is a software package from Red Hat USA. An access control error vulnerability exists in Redhat redhat-certification 7 that stems from the component not restricting access to files in the update results page. An attacker could exploit this vulnerability to delete any file...

PT-2021-11902

Name of the Vulnerable Software and Affected Versions: AppCMS version 2.0.101 Description: The issue allows attackers to delete arbitrary files on the site due to an arbitrary file deletion vulnerability in /admin/info.php. Recommendations: For AppCMS version 2.0.101, consider restricting access ...

CVE-2020-36005: Undefined Security Weakness

AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site...

Arbitrary File Deletion Vulnerability in Wild Rain Novel cms (CNVD-2021-40731)

Wild Rain Fiction CMS provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL. Rain Novel cms arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...

AppCMS 安全漏洞

APPCMS is a professional APP content management system, APP application part needs to be used in combination with data center. An arbitrary file deletion vulnerability exists in /admin/info.php in AppCMS version 2.0.101. An attacker can exploit this vulnerability to delete arbitrary files on the...

Arbitrary File Deletion Vulnerability in CMS

Knowledge CMS is an open source website builder. Know CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file directory...

PUB-A-176756691

In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Arbitrary file deletion vulnerability in emlog (CNVD-2021-41633)

emlog is short for every memory log, a PHP and MySQL based blog and CMS builder. There is an arbitrary file deletion vulnerability in emlog. An attacker can exploit this vulnerability to delete arbitrary files...

Logic Flaw Vulnerability in EG Easy Gateway of Ruijie Networks Co.

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and so on. A logic flaw vulnerability exists in the EG Easy Gateway of Ruijie...

Arbitrary File Deletion Vulnerability in Joomla!

SP Page Builder plugin is a free page builder component that users can use on joomla sites to design and edit site page content. An arbitrary file deletion vulnerability exists in Joomla! SP Page Builder, which can be exploited to delete arbitrary files on the target server...

XStream: arbitrary file deletion on the local host when unmarshalling

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerability may allow a remote attacker to delete arbitrary know files on the host as log as the executin...

XStream: arbitrary file deletion on the local host via crafted input stream

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on...

Design/Logic Flaw

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...

CVE-2021-29695

IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558...

CVE-2021-29695

CVE-2021-29695 concerns IBM Host firmware for LC-class Systems (e.g., OP820 on 8335-GCA/GTA/GTB). The vulnerability allows a remote attacker to traverse directories and delete arbitrary files by sending a specially crafted URL request. Metrics show mixed scores across CVSS versions (NVD 3.1: 6.5 ...

Directory Traversal

github.com/dutchcoders/transfer.sh is vulnerable to directory traversal. The vulnerability exists as untrusted user input is not validated and sanitized, allowing an attacker to exploit the vulnerability to perform arbitrary file deletion...

Arbitrary File Deletion Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a WEB application development system. LCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to arbitrarily delete files...