CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

Arbitrary file deletion

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

Arbitrary file deletion

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

CVE-2021-46820 affects the XOS-Shop system (xos_shop_system 1.0.9). The issue is an arbitrary file deletion vulnerability exploitable via the current_manufacturer_image parameter to /shop/admin/categories.php. The connected sources confirm the affected product and the vulnerable parameter but do ...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

CVE-2021-37764

CVE-2021-37764 affects XOS-Shop xos_shop_system 1.0.9. The vulnerability is described as Arbitrary File Deletion via the current_manufacturer_image parameter to /shop/admin/manufacturers.php, implying an unauthenticated or low-privilege access path that can delete files. The NVD metrics indicate ...

XOS-Shop xos_shop_system 安全漏洞

xosshopsystem is XOS-Shop open source a powerful e-commerce shopping cart and CMS software. A security vulnerability exists in XOS-Shop xosshopsystem 1.0.9, which originates from an arbitrary file deletion vulnerability found via the currentmanufacturerimage parameter of...

XOS-Shop xos_shop_system 安全漏洞

xosshopsystem is XOS-Shop open source a powerful e-commerce shopping cart and CMS software. A security vulnerability exists in XOS-Shop xosshopsystem 1.0.9, which originates from an arbitrary file deletion vulnerability found in the currentmanufacturerimage parameter of /shop/admin/categories.php...

CVE-2021-46820: Missing Authorization

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/categories.php...

CVE-2021-37764: Missing Authorization

Arbitrary File Deletion vulnerability in XOS-Shop xosshopsystem 1.0.9 via currentmanufacturerimage parameter to /shop/admin/manufacturers.php...

PT-2022-10665

Name of the Vulnerable Software and Affected Versions XOS-Shop xos shop system version 1.0.9 Description The issue concerns an Arbitrary File Deletion vulnerability. It can be exploited via the current manufacturer image parameter to the "/shop/admin/manufacturers.php" API endpoint. Recommendatio...

PT-2022-12932

Name of the Vulnerable Software and Affected Versions XOS-Shop xos shop system version 1.0.9 Description The issue is related to an Arbitrary File Deletion vulnerability. It can be exploited via the current manufacturer image parameter to the "/shop/admin/categories.php" API endpoint...