webTareas File Deletion Vulnerability in print_layout.php Component

A file deletion vulnerability has been identified in webTareas version 2.0.p8, specifically within the print_layout.php administration component. This vulnerability allows authenticated attackers to delete arbitrary files on the server. Exploitation involves manipulating the 'atttmp1' parameter to specify files for deletion, bypassing authentication requirements.

Impact

Exploitation of this vulnerability allows for arbitrary file deletion on the server.

Reproduction

To reproduce this vulnerability, send a POST request to the print_layout.php administration page. Include the 'atttmp1' parameter in the request, specifying the name of the file to be deleted. The vulnerability can be exploited without authentication.