PT-2022-17692

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.3 Description An issue was discovered in MantisBT, where improper escaping of a Plugin name allows execution of arbitrary code in manage plugin page.php and manage plugin uninstall.php when a crafted plugin is...

WordPress AntiVirus Plugin <= 1.0 - Full Path Disclosure

This plugin is prone to an uninstall.php direct request path disclosure vulnerability. Solution Upgrade this plugin...

AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure

The AntiVirus WordPress plugin was affected by an uninstall.php Direct Request Path Disclosure security vulnerability...

CVE-2004-1828

CVE-2004-1828 affects Vcard 2.9 (and possibly other versions). The flaw is that uninstall.php does not require authorization, enabling remote attackers to trigger uninstall and delete database tables via a direct request. The NVD entry lists a base score of 5.0 (Medium) with network access, low a...

CVE-2004-1828

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php...

CVE-2004-1828: Undefined Security Weakness

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php...