Directory traversal

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

CVE-2020-21862

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

CVE-2020-21862: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del...

Arbitrary file deletion

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...

PT-2022-19066

Name of the Vulnerable Software and Affected Versions dhcms version 20170919 Description The issue allows for arbitrary folder deletion via the /admin.php?r=admin/AdminBackup/del API endpoint. This could potentially lead to data loss or disruption of service. No information is provided about the...

CVE-2022-28527: Improper Limitation of a Pathname to a Restricted Directory

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...