CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

PT-2022-10665

Name of the Vulnerable Software and Affected Versions XOS-Shop xos shop system version 1.0.9 Description The issue concerns an Arbitrary File Deletion vulnerability. It can be exploited via the current manufacturer image parameter to the "/shop/admin/manufacturers.php" API endpoint. Recommendatio...