Security Advisory

CVE-2020-21554

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-25 15:38:58
Last updated 2024-08-04 14:30:33
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.