CVE-2020-37080 HIGH

CVE-2020-37080: webTareas 2.0.p8 - Arbitrary File Deletion

Vendor Luiswang

Product webTareas

Weakness CWE-73

Published February 3, 2026

Last update March 5, 2026

View on NVD All CVEs

CVSS base score

7.2/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

webTareas 2.0.p8 contains a file deletion vulnerability in the print_layout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through an unauthenticated file deletion mechanism.

Key dates

02Disclosure timeline

February 3, 2026 CVE published

March 5, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-37080 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/73.html

Related vulnerabilities

04Related CVE

CVE-2026-35077 Arbitrary file delete vulnerability in method ugw-delete-file CVE-2025-68478 Langflow Vulnerable to External Control of File Name or Path CVE-2025-6463 Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion CVE-2023-30943 Moodle: tinymce loaders susceptible to arbitrary folder creation CVE-2026-28286 ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API