CVE-2007-3936 Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the d...
MediumCVSS 6.4
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| a-shop | <= 0.70 | No fix listed |
| a-shop | <= 0.71 | No fix listed |
References
- 26126 third-party-advisory vendor-advisory
- 24971 vdb-entry
- ashop-filebrowser-file-deletion(35483) vdb-entry
- 4198 exploit