CVE-2026-116223

A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. The attack can be launched remotely. The exploit has been published and may be used...

EUVD-2026-109623

A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2026-116223

A flaw in icret EasyImage up to version 2.8.7 allows for improper privilege management due to a vulnerability in an unknown function within the app/del.php file. An attacker can achieve this by remotely executing a manipulation of the argument hash . An exploit has been published and may be used ...

PT-2021-11656

Name of the Vulnerable Software and Affected Versions: Z-BlogPHP version 1.6.1.2100 Description: The issue allows for arbitrary file deletion via the app del.php endpoint. Recommendations: For Z-BlogPHP version 1.6.1.2100, as a temporary workaround, consider restricting access to the app del.php...

PT-2018-17698

Name of the Vulnerable Software and Affected Versions Z-BlogPHP version 1.5.1 Description The issue allows for CSRF via "zb users/plugin/AppCentre/app del.php", which can be exploited to delete files and directories. Recommendations For Z-BlogPHP version 1.5.1, consider restricting access to the...