CVE-2022-30523

Trend Micro Password Manager Consumer version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the...

PT-2022-9578

Name of the Vulnerable Software and Affected Versions OMGF | Host Google Fonts Locally WordPress plugin versions prior to 4.5.12 Description The issue allows high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin due to the lack of validation...

PT-2019-18584

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description An issue in PHPMyWind allows remote attackers to delete arbitrary folders. This is achieved through the "admin/database backup.php" API endpoint with specific parameters, including action=import, dopost=deldir...

CVE-2019-7403: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/databasebackup.php?action=import&dopost=deldir&tbname=../ URI...