Description
A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.
Unscored
CVE-2020-21554
EUVD-2020-14322GHSA-mp49-872p-4w68
A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious use…
Published Mar 25, 2022 · Updated Aug 4, 2024 · Assigned by mitre