43 matches found
CVE-2024-48225
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...
PT-2024-33035
Name of the Vulnerable Software and Affected Versions Funadmin version 5.0.2 Description The issue is related to an arbitrary file deletion vulnerability. It affects the /curd/index/delfile API endpoint. Recommendations For Funadmin version 5.0.2, consider restricting access to the...
CVE-2024-48225
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...
CVE-2024-48225
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...
CVE-2024-48225: Undefined Security Weakness
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...
CVE-2024-48225
The funadmin/funadmin framework, specifically version 5.0.2 , is vulnerable to SQL Injection and Arbitrary File Deletion . The root cause is a lack of proper access control and insecure handling within the delfile method located in controller\Index.php (accessible via the /curd/index/delfile endp...
CVE-2024-48225
Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile...
Funadmin 安全漏洞
FunAdmin is FunAdmin open source a lightweight and high-color backend development system based on ThinkPHP6+Layui development. A security vulnerability exists in Funadmin version 5.0.2, which originates from an arbitrary file deletion vulnerability in /curd/index/delfile...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
CVE-2024-27489
The WMCMS v4.4 software contains a vulnerability in the DelFile() function. This issue allows an unauthenticated attacker to perform arbitrary file deletion by sending a crafted POST request . The vulnerability is associated with CWE-473 (PHP External Variable Modification) and CWE-791 (Incomplet...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
PT-2024-21919 · Wmcms · Wmcms
Name of the Vulnerable Software and Affected Versions: WMCMS version 4.4 Description: An issue in the DelFile function allows attackers to delete arbitrary files via a crafted POST request. Recommendations: For WMCMS version 4.4, consider disabling the DelFile function until a patch is available ...
CVE-2024-27489: PHP External Variable Modification
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
PHPOK Arbitrary File Deletion Vulnerability
PHPOK is an enterprise building system that supports expansion. An arbitrary file deletion vulnerability exists in the 'delfilef' function in the framework/admin/tplcontrol.php file in PHPOK version 4.9.032. An attacker can exploit this vulnerability to delete arbitrary files...
PT-2018-11214
Name of the Vulnerable Software and Affected Versions PHPOK version 4.9.032 Description The issue is related to an arbitrary file deletion vulnerability. It affects the delfile f function located in framework/admin/tpl control.php. Recommendations For PHPOK version 4.9.032, consider restricting...
NewvCommon.ocx Active-X Insecure Method
NewvCommon.ocx ActiveX Insecure Method Vulnerability ======== Vulnerable:All Version Vendor:www.newv.com.cn Details: ======== A Insecure method vulnerability has been found in NewV SmartClient. The specific flaw exists within the DelFile method of the Newv ActiveX control NewvCommon.ocx. The...
CVE-2008-4425: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action...
