CVE-2026-2953 Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal

A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-2953

A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-2953 Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal

A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed...

CVE-2026-2953 Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal

A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed...

UJCMS 路径遍历漏洞

UJCMS is a Java open-source content management system developed by dromara. Version 101.2 of UJCMS has a path traversal vulnerability. This vulnerability stems from the deleteDirectory function in the WebFileTemplateController.delete file, which has issues with path traversal...

CVE-2026-2953: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed...

CVE-2025-56430: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function...

CVE-2025-56430

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function...

CVE-2025-56430

CVE-2025-56430 : A directory traversal vulnerability affects FearlessCMS v0.0.2-15, allowing a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function. The root cause is a directory traversal issue in the referenced code path. Exploitation details ...

FearlessCMS 安全漏洞

FearlessCMS is a flat file content management system from the individual developers at Fearless Geek Media. A security vulnerability exists in FearlessCMS version v.0.0.2-15, which stems from a directory traversal vulnerability in the plugin-handler.php and deleteDirectory functions, which could...

CVE-2025-56430

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function...

CVE-2025-56430

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function...

PT-2025-50486

Name of the Vulnerable Software and Affected Versions FearlessCMS version 0.0.2-15 Description A directory traversal issue exists in FearlessCMS version 0.0.2-15. This allows a remote attacker to potentially cause a denial of service by exploiting the plugin-handler.php file and the deleteDirecto...