CVE-2024-27489

HIGH Year: 2024
CVSS v3 Score
7.5
High
Weakness Type
CWE-473
View all →

Vulnerability Description

An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.

Related Vulnerabilities

CVE-2023-36845

CRITICAL
CVSS:9.8(Critical)

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a...

CWE-4732023

CVE-2023-36844

MEDIUM
CVSS:5.3(Medium)

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variab...

CWE-4732023