Description
Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| abcprintf | Online Store | unspecified – ≤ 1.0 | — |
Unscored
CVE-2019-8291
EUVD-2019-17689GHSA-mm79-886x-9cqc
Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.
Published Oct 1, 2019 · Updated Aug 4, 2024 · Assigned by larry_cashdollar