CVE-2021-37764: Missing Authorization

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

XOS-Shop xos_shop_system 安全漏洞

xosshopsystem is XOS-Shop open source a powerful e-commerce shopping cart and CMS software. A security vulnerability exists in XOS-Shop xosshopsystem 1.0.9, which originates from an arbitrary file deletion vulnerability found via the currentmanufacturerimage parameter of...

osCommerce 2.2 admin/manufacturers.php page Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...