CVE-2024-34191

htmly v2.9.6 was discovered to contain an arbitrary file deletion vulnerability via the deletepost function at admin.php. This vulnerability allows attackers to delete arbitrary files via a crafted request...

CVE-2022-31295

CVE-2022-31295 affects Online Discussion Forum Site 1.0, with the delete_post() function in Maset.php:133 allowing unauthenticated attackers to arbitrarily delete posts. Multiple connected sources confirm the issue and describe it as a failure in delete_post(), enabling post deletion without auth...