Arbitrary File Deletion Vulnerability in Monstra CMS

Monstra is a modern and lightweight content management system. Monstra CMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files under the server...

Catalog Traversal Vulnerability in the Electricity Cloud Platform of Ankorui Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. A directory traversal vulnerability exists in the Ankrui Electric Company Limited Intelligent Electrici...

Arbitrary File Deletion Vulnerability in Yunye CMS

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the server...

Arbitrary File Deletion Vulnerability in Aptar CMS (CNVD-2020-32581)

Aptar CMS website management system is developed with PHP+MYSQL technology and MVC model, with a clear structure and easy-to-maintain code. Aptar CMS has an arbitrary file deletion vulnerability that can be exploited by attackers to delete server files...

Arbitrary File Download Vulnerability in Kaiping Lianke Network Technology Co.

Kaiping Lianke Network was founded in 2005, is a main website construction, website promotion, speedy software, bathroom ERP management software, micro letter marketing company. Kaiping City, Lianke Network Technology Co., Ltd. station-building system exists arbitrary file download vulnerability,...

CVE-2019-20390

A Cross-Site Request Forgery CSRF vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application fails to validate the CSRF token for a G...

Arbitrary File Deletion Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. Haiwell Haiwei Cloud SCADA configuration software Cloud SCADA arbitrary file deletion vulnerability, an attacker can exploit...

SSYCMS UGC Contributor Edition suffers from arbitrary file read vulnerability

SSYCMS is a free and open source commercial content management system. SSYCMS UGC Submission Edition suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to arbitrarily read server files...

Arbitrary File Deletion Vulnerability in WeCenter Learning Free Edition

WeCenter is an open source knowledge-based social Q&A community program. An arbitrary file deletion vulnerability exists in the free version of WeCenter Learning, which can be exploited by an attacker to delete arbitrary files from the server...

Arbitrary File Deletion Vulnerability in Five Fingers CMS

Five Fingers CMS is an open source content management system. Five Fingers CMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary server files...

Arbitrary File Deletion Vulnerability in Advantech WebAccess/SCADA

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Advantech WebAccess/SCADA suffers from arbitrary file deletion vulnerability (CNVD-2020-29403)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to delete arbitrary files from the server...

Flux-Keylogger - Modern Javascript Keylogger With Web Panel

Modern javascript keylogger with web panel Web panel: Logging: Keylogger Cookies Location Remote IP User-Agents Installation server files: Upload files from server directory to you server Change default username, password in flux.php Go to http://you.host/flux.php Click build Now inject script ta...

Arbitrary File Deletion Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file under the server...

OurPHP Omnicom website builder system background exists arbitrary file deletion vulnerability

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. OurPHP website builder system has an arbitrary file deletion vulnerability in the background, which can be exploited by attackers to delete any file under the server...

Arbitrary File Download Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS has an arbitrary file download vulnerability that can be exploited by attackers to download sensitive server files...

Arbitrary File Deletion Vulnerability in the Backend of Feifei Movie Navigation System (CNVD-2020-25318)

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. Feifei Movie and TV navigation system background there are arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file server...

CVE-2020-11596

A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information about what files and directories reside on the server...

CVE-2020-11596

A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information about what files and directories reside on the server...

Worry-free PHP enterprise website management system suffers from arbitrary file deletion vulnerability (CNVD-2020-25574)

Hassle-free PHP enterprise website management system is a website management system developed using PHP+MYSQL technology and MVC model. Worry-Free PHP Enterprise Website Management System has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the...