Unrated severityNVD Advisory· Published Mar 25, 2022· Updated Aug 4, 2024
CVE-2020-21554
CVE-2020-21554
Description
A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.
Affected products
2- TinyShop/TinyShopdescription
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- tinyrise.commitrex_refsource_MISC
- tinyrise.com/down.htmlmitrex_refsource_MISC
- imgur.com/dg1DM5Tmitrex_refsource_MISC
- imgur.com/pA8OWxamitrex_refsource_MISC
News mentions
0No linked articles in our index yet.