← All advisories

High severity7.5NVD Advisory· Published Oct 1, 2019· Updated Jun 17, 2026

CVE-2019-8291

CVE-2019-8291

Description

Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Online Store System Project/Online Store System
cpe:2.3:a:online_store_system_project:online_store_system:1.0:*:*:*:*:*:*:*
Abcprintf/Online Storev5
Range: unspecified

Patches

Vulnerability mechanics

References

3

www.openwall.com/lists/oss-security/2019/10/02/1nvdExploitMailing ListThird Party Advisory
www.vapidlabs.com/advisory.phpnvdPermissions RequiredThird Party Advisory
www.abcprintf.com/view_download.phpnvdProduct

News mentions

0

No linked articles in our index yet.