Vulnerabilities > CVE-2021-37764 - Missing Authorization vulnerability in Xos-Shop XOS Shop System 1.0.9
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/manufacturers.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |