Online Store System v1.0 deletefile.php doesn't check to see if a user has administrative rights nor does it check for path traversal...
7.5CVSS7.1AI score0.01407EPSS
SaveExploits1References3
OSV•added 2019/10/01 8:15 p.m.•6 views
CVE-2019-8292
Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...
