CVE-2007-3936

CVE-2007-3936 describes a directory traversal vulnerability in admin/filebrowser.asp of the A-shop software, affecting version 0.70 and earlier, and possibly 0.71. The issue allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter. The connec...