PT-2025-12069

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version 0.6.0 Description A Path Traversal issue exists, allowing an attacker to delete any file on the server by manipulating the file key parameter at the API endpoint "/v1/resource/file/delete". The file key parameter is...

PT-2024-16289 · Unknown · Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: Blood Bank Management System version 1.0 Description: A problematic issue has been found in the Blood Bank Management System, affecting some unknown functionality of the file /file/delete.php. The manipulation of the bid argument leads to...

PT-2023-30872 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 9.2.3 Description: The issue is related to Cross Site Request Forgery CSRF at the "/ccm/system/dialogs/file/delete/1/submit" API endpoint. This allows for unauthorized actions to be performed. Recommendations: F...