79 matches found
CVE-2022-28058
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
CVE-2022-28059
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
CVE-2022-28058
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
CVE-2022-28059
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
CVE-2022-28059
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
Arbitrary file deletion
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
Arbitrary file deletion
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
CVE-2022-28058
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
CVE-2022-28059
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
CVE-2022-28058
CVE-2022-28058 affects Verydows v2.0 and enables arbitrary file deletion via the path backend\file_controller.php. The NVD entry reports CVSSv3.1 impact: Confidentiality NONE, Integrity HIGH, Availability HIGH (base score 8.1); exposure via NETWORK with low attack complexity, no user interaction ...
CVE-2022-28059
CVE-2022-28059 affects Verydows v2.0 with an arbitrary file deletion vulnerability via \backend\database_controller.php. Connected documents confirm the same flaw across sources, stating an attacker can delete arbitrary files through the referenced path. CVSSv3.1 vectors indicate network access, ...
Verydows 路径遍历漏洞
Verydows is a lightweight open source e-commerce management system developed using the PHP language . Verydows v2.0 has a security vulnerability , an attacker can ackenddatabasecontroller.php for arbitrary file deletion...
Verydows 路径遍历漏洞
Verydows is a lightweight open source e-commerce management system developed using the PHP language . Verydows v2.0 has a security vulnerability , the attacker can ackendfilecontroller.php for arbitrary file deletion...
PT-2022-18784
Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue allows for arbitrary file deletion via the file controller.php endpoint. This is a significant concern as it could lead to data loss or system compromise. Recommendations For Verydows version 2.0,...
CVE-2022-28058: Improper Limitation of a Pathname to a Restricted Directory
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...
CVE-2022-28059: Improper Limitation of a Pathname to a Restricted Directory
Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...
PT-2022-18785
Name of the Vulnerable Software and Affected Versions Verydows version 2.0 Description The issue allows for arbitrary file deletion via the backend/database controller.php endpoint. This could potentially lead to significant disruptions or data loss. Recommendations For Verydows version 2.0,...
File Upload Vulnerability in Verydows 2.0 Backend
Verydows is a free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance and strong security. Verydows 2.0 backend file upload vulnerability, attackers can exploit the vulnerability to obtain server privileges...
Arbitrary Code Execution Vulnerability in Verydows Backend
Verydows is a completely free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance, high load and security stability. Verydows backend arbitrary code execution vulnerabilities, attackers can exploit the vulnerability to obtain...