30 matches found
Path traversal in pimcore
The application doesn't perform a check/filter against the value of "importFile" parameter at endpoint "/admin/translation/import". After the API is executed, PHP unlink function will proceed to delete the file...
GHSA-GJQ4-69WJ-P6PR Path traversal in pimcore
The application doesn't perform a check/filter against the value of "importFile" parameter at endpoint "/admin/translation/import". After the API is executed, PHP unlink function will proceed to delete the file...
CVE-2022-24647
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
CVE-2022-24647
Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink function...
CuppaCMS 路径遍历漏洞
CuppaCMS is a content management system CMS. a security vulnerability exists in CuppaCMS v1.0, which stems from the fact that Cuppa CMS v1.0 was found to contain an arbitrary file deletion vulnerability via the unlink function. No details of the vulnerability are currently available...
in pheditor/pheditor
Description This issue allows an attacker to influence calls to the 'unlink' function and delete arbitrary files. https://github.com/pheditor/pheditor is vulnerable to DoS via Arbitrary file deletion. Proof of concept Vuln variable: $POST'path' Snippet: case 'delete': if isset$POST'path' &&...
CSZ CMS has an unspecified vulnerability
CSZ CMS is a PHP-based open source content management system CMS. version 1.2.9 of CSZ CMS contains a security vulnerability that stems from the vulnerability of CSZ CMS to arbitrary file deletion. This can occur in PHP when the unlink function is called with user input that may affect part or th...
CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion
Exploit Title: CSZ CMS 1.2.9 - 'Multiple' Arbitrary File Deletion Date: 2021-07-20 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.cszcms.com Software Link: https://sourceforge.net/projects/cszcms/files/latest/download Version: 1.2.9 Tested on: Windows 10,...
webTareas 2.0.p8 - Arbitrary File Deletion Vulnerability
Exploit for php platform in category web applications Exploit Title: webTareas 2.0.p8 - Arbitrary File Deletion Author: Besim ALTINOK Vendor Homepage: https://sourceforge.net/projects/webtareas/files/ Software Link: https://sourceforge.net/projects/webtareas/files/ Version: v2.0.p8 Tested on: Xam...
