2348 matches found
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
Design/Logic Flaw
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20893
Affected software: cPanel. Vulnerability: core issue allows file-rename operations during account renames (SEC-442) prior to version 74.0.0. Root cause details are not expanded beyond this description in the provided documents. Impact: exposes unintended file-rename behavior during account rename...
PT-2019-10371
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue concerns the lack of validation for database and dbuser names during the rename process. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later to resolve the...
PT-2019-10323
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.0 Description: The issue allows file-rename operations during account renames. Recommendations: For versions prior to 74.0.0, update to version 74.0.0 or later to resolve the issue...
CVE-2018-20893: Improper Input Validation
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
Avast Antivirus Local Denial of Service Vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus versions prior to 19.4. The vulnerability can be exploited to bypass the Avast self-protection mechanism and rename important binary files e.g. AvastSvc.exe file,...
CVE-2019-11230
In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...
PT-2019-12204
Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 19.4 Description A local administrator can exploit a defect in the product by replacing the LogsUpdate.log file with a symlink, allowing them to rename arbitrary files. This can be used to rename critical...
CVE-2019-11230: Improper Link Resolution Before File Access
In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...
Insert or Embed Articulate Content into WordPress plugin <= 4.2999 - Authenticated Arbitrary Folder Deletion and Rename
Authenticated Arbitrary Folder Deletion and Rename vulnerability found in Insert or Embed Articulate Content into WordPress plugin versions = 4.2999. Solution Update the Insert or Embed Articulate Content into WordPress plugin to the latest available version at least 4.29991...
Insert or Embed Articulate Content into WordPress <= 4.2999 - Authenticated Arbitrary Folder Deletion and Rename
The lack of CSRF, Authorisation and Path Traversal checks in wpajaxdeldir and wpajaxrenamedir AJAX methods in functions.php make it possible for an authenticated user with a role as low as subscriber to delete and rename arbitrary folders. CSRF attacks against such authenticated users is also...
CVE-2016-10759
The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
PT-2019-7548
Name of the Vulnerable Software and Affected Versions Serendipity version 2.0.3 Description The issue allows remote attackers to upload and execute arbitrary PHP code due to mishandling of an extensionless filename during a rename. This can be demonstrated by using "php" as a filename...
