PortlandLabs Concrete CMS 路径遍历漏洞

PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS is vulnerable to an arbitrary file deletion vulnerability that stems from allowing traversal of /index.php/ccm/system/file/ upload, which can be exploited by...

Fast Food Ordering System Arbitrary File Deletion Vulnerability

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to an arbitrary file deletion vulnerability, which originates in /ffos/classes/Master.php?f=deleteimg page lacks valid validation and can be...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

Arbitrary file deletion

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

Arbitrary file deletion

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

CVE-2021-46820 affects the XOS-Shop system (xos_shop_system 1.0.9). The issue is an arbitrary file deletion vulnerability exploitable via the current_manufacturer_image parameter to /shop/admin/categories.php. The connected sources confirm the affected product and the vulnerable parameter but do ...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

CVE-2021-37764 affects XOS-Shop xos_shop_system 1.0.9. The vulnerability is described as Arbitrary File Deletion via the current_manufacturer_image parameter to /shop/admin/manufacturers.php, implying an unauthenticated or low-privilege access path that can delete files. The NVD metrics indicate ...

PT-2022-12932

Name of the Vulnerable Software and Affected Versions XOS-Shop xos shop system version 1.0.9 Description The issue is related to an Arbitrary File Deletion vulnerability. It can be exploited via the current manufacturer image parameter to the "/shop/admin/categories.php" API endpoint...

CVE-2021-37764: Missing Authorization

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-46820: Missing Authorization

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

XOS-Shop xos_shop_system 安全漏洞

xosshopsystem is XOS-Shop open source a powerful e-commerce shopping cart and CMS software. A security vulnerability exists in XOS-Shop xosshopsystem 1.0.9, which originates from an arbitrary file deletion vulnerability found in the currentmanufacturerimage parameter of /shop/admin/categories.php...