CVE-2019-8292

Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion

published October 1, 2019

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01886 · 79.3th percentile
Published
2019-10-01T19:53Z
EPSS history
Timeline
  • 01 OCT 19:53Z
    Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion
    cvelistv5