file deletion vulnerability