Skip to content
OpenAdvisories

Product · neoslab

Database Toolset

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion

    The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the serv…