CVE-2019-8292

Publication date

2019-10-01 19:53:28

Family

larry_cashdollar

State

PUBLISHED

Description

Online Store System v1.0 delete_product.php doesnt check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.