Critical severity · published Feb 3, 2026
CVE-2020-37080
webTareas 2.0.p8 - Arbitrary File Deletion
9.8
CVSS
0.4%
EPSS
No
On KEV
Description
webTareas 2.0.p8 contains a file deletion vulnerability in the print_layout.php administration component that allows authenticated attackers to delete arbitrary files. Attackers can exploit the vulnerability by manipulating the 'atttmp1' parameter to specify and delete files on the server through an unauthenticated file deletion mechanism.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
webTareas · luiswang
2.0.p8 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-37080
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-37080
sourceforge.net
https://sourceforge.net/projects/webtareas/
www.exploit-db.com
https://www.exploit-db.com/exploits/48430
www.vulncheck.com
https://www.vulncheck.com/advisories/webtareas-p-arbitrary-file-deletion