CVE-2026-33686

Sharp is a content management framework built for Laravel as a package. Versions prior to 9.20.0 have a path traversal vulnerability in the FileUtil class. The application fails to sanitize file extensions properly, allowing path separators to be passed into the storage layer. In...

EUVD-2019-15456

Malware in sbrugna...

CVE-2019-5887

An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling by the rmdir method. Attackers can delete arbitrary files by using "../" directory traversal...

CVE-2019-5887

ShopXO 1.2.0 is affected. In FileUtil.php’s UnlinkDir, input parameters are not validated, allowing directory traversal via "../" to induce rmdir to delete arbitrary files. This results in potential partial/complete file deletion and is mitigated only by proper input validation; no patch/version ...

CVE-2019-5887: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling by the rmdir method. Attackers can delete arbitrary files by using "../" directory traversal...

PT-2019-17845

Name of the Vulnerable Software and Affected Versions ShopXO version 1.2.0 Description An issue in the UnlinkDir method of the FileUtil.php file allows input mishandling by the rmdir method due to unchecked input parameters. This enables attackers to delete arbitrary files using "../" directory...