EUVD-2019-15456

Malware in sbrugna...

CVE-2019-5887

An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling by the rmdir method. Attackers can delete arbitrary files by using "../" directory traversal...

CVE-2019-5887

ShopXO 1.2.0 is affected. In FileUtil.php’s UnlinkDir, input parameters are not validated, allowing directory traversal via "../" to induce rmdir to delete arbitrary files. This results in potential partial/complete file deletion and is mitigated only by proper input validation; no patch/version ...

PT-2019-17845

Name of the Vulnerable Software and Affected Versions ShopXO version 1.2.0 Description An issue in the UnlinkDir method of the FileUtil.php file allows input mishandling by the rmdir method due to unchecked input parameters. This enables attackers to delete arbitrary files using "../" directory...

CVE-2019-5887: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling by the rmdir method. Attackers can delete arbitrary files by using "../" directory traversal...