Description
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tad | TadTools | ≤ 3.2.1 | — |