WordPress ProSolution WP Client plugin <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters vulnerability

Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters vulnerability discovered by CHOIGYEONGMIN in WordPress Plugin ProSolution WP Client versions = 2.0.8...

Directory traversal

A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the 1 folder, 2 filename, and 3 newfilename variables in app\edit\filerename.php...

CVE-2018-9134

filemanagecontrol.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by renaming an arbitrary file under uploads/userup to a .php file under the web root to achieve PHP code execution. This uses the oldfilename and newfilename parameters...

PT-2018-18878

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description The issue concerns a CSRF vulnerability in the file manage control.php file. This vulnerability can be exploited by renaming an arbitrary file under uploads/userup to a .php file under the web root, allowing for...

CVE-2016-6283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...

PT-2017-8954

Name of the Vulnerable Software and Affected Versions Atlassian Confluence versions prior to 5.10.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to the "pages/doeditattachment.action" API endpoint...

XSS in newFileName Field

From an external report: quote Confluence recently has been tested and, as a result, we were able to verify the existence of at least one persistent XSS vulnerability. This vulnerability is present in the Edit Attachment feature — specifically in the newFileName field — accessible through the...

XSS in newFileName Field

From an external report: quote Confluence recently has been tested and, as a result, we were able to verify the existence of at least one persistent XSS vulnerability. This vulnerability is present in the Edit Attachment feature — specifically in the newFileName field — accessible through the...