CVE-2022-28918

GreenCMS v2.3.0603 is affected by an arbitrary file deletion vulnerability exploitable over the network via /index.php?m=admin&c=custom&a=plugindelhandle&plugin_name=. The CVE entry indicates this allows deletion of arbitrary files, with CVSSv3.1 base score 8.1 (HIGH) and a network attack vector;...

CVE-2022-28918

GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...

PT-2022-19311

Name of the Vulnerable Software and Affected Versions GreenCMS version 2.3.0603 Description The issue allows for arbitrary file deletion. This can be achieved via the "/index.php?m=admin&c=custom&a=plugindelhandle&plugin name=" API endpoint, where the plugin name variable is utilized...

CVE-2022-28918: Undefined Security Weakness

GreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index.php?m=admin&c=custom&a=plugindelhandle&pluginname=...