Rand0Mpythoner

The issue allows remote authenticated users to delete arbitrary files. This is achieved through a directory traversal vulnerability in the "admin/template.php" endpoint, specifically when the "action" parameter is set to "del" and the "tpl" parameter is manipulated to traverse directories.

The issue allows for arbitrary file deletion by utilizing a ../ in the `file` parameter to the "admin/index.php/database/ajax" endpoint with the `action` set to `delete`. This can be exploited to delete critical files such as `config.php`, which, upon deletion, allows an attacker to reinstall the product by visiting `install/index.php`.

The issue allows for arbitrary file deletion via an admin/data.php?action=dell all bak request. This is achieved by using directory traversal sequences in the `bak[]` parameter.