CVE-2021-37764
Description
Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/manufacturers.php.
CvssV3 impact
Could not find any metrics
CvssV2 impact
AccessComplexity | LOW |
ConfidentialityImpact | NONE |
AvailabilityImpact | PARTIAL |
IntegrityImpact | PARTIAL |
BaseScore | 5.5 |
VectorString | AV:N/AC:L/Au:S/C:N/I:P/A:P |
Version | 2.0 |
AccessVector | NETWORK |
Authentication | SINGLE |