7 matches found
PT-2026-95941
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable within the /reviewer 0/admins/assessments/subject/btn functions.php?action=remove endpoint...
PT-2026-95943
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs in th...
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...
PT-2024-30067 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /admin/admin widgets.php endpoint with specific parameters: action=remove and widget=Statistics. This...
CVE-2022-28127
A data removal vulnerability exists in the webserver /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability...
PT-2018-14842
Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description The issue allows for arbitrary file deletion. This can be achieved by exploiting the statics/ueditor/php/controller.php "action=remove" key parameter, where an attacker can use directory traversal to delete...
CVE-2018-19181: Improper Limitation of a Pathname to a Restricted Directory
statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file...