CVE-2026-18959

A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopacks/restapi/routes/panel-api.php of the component Files Endpoint. This manipulation causes path traversal. The attack may be initiated remotely. The...

CVE-2026-18959: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this issue is the function FileManagerController::destroyFiles of the file innopacks/restapi/routes/panel-api.php of the component Files Endpoint. This manipulation causes path traversal. The attack may be initiated remotely. The...

PT-2026-68326

Name of the Vulnerable Software and Affected Versions yushine InnoShop versions prior to 0.8.2 Description A path traversal flaw exists in the Files Endpoint component. This issue occurs within the FileManagerController::destroyFiles function located in the innopacks/restapi/routes/panel-api.php...