CVE-2021-37764

2022-06-1621:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

JSON

Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/manufacturers.php.

CPENameOperatorVersion
xos_shop_systemeq1.0_rc7z
xos_shop_systemeq1.0_rc7
xos_shop_systemeq1.0.2
xos_shop_systemeq1.0.8
xos_shop_systemeq1.0_rc7x
xos_shop_systemeq1.0_rc7y
xos_shop_systemeq1.0.1
xos_shop_systemeq1.0.4
xos_shop_systemeq1.0.6
xos_shop_systemeq1.0.7

Name	Operator	Version
xos_shop_system	eq	1.0_rc7z
xos_shop_system	eq	1.0_rc7
xos_shop_system	eq	1.0.2
xos_shop_system	eq	1.0.8
xos_shop_system	eq	1.0_rc7x
xos_shop_system	eq	1.0_rc7y
xos_shop_system	eq	1.0.1
xos_shop_system	eq	1.0.4
xos_shop_system	eq	1.0.6
xos_shop_system	eq	1.0.7

Rows per page:

1-10 of 181

References

github.com/XOS-Shop/xos_shop_system/issues/1