Innoshop
Monthly
Path traversal in InnoShop versions 0.8.0 through 0.8.2 allows remotely authenticated low-privilege users to delete arbitrary files on the server via the FileManagerController::destroyFiles function exposed through the panel REST API. The affected PHP e-commerce platform by yushine has no vendor-released patch - the vendor did not respond to responsible disclosure - and a public proof-of-concept exploit is available on GitHub. The CVSS 4.0 score of 2.1 reflects limited per-request impact (low integrity, low availability, no confidentiality loss), but the unpatched status combined with public exploit code elevates operational urgency for any deployment.
InnoShop e-commerce platform versions up to 0.7.8 allow unauthenticated remote attackers to bypass authentication controls in the installation endpoint via improper authentication handling in InstallServiceProvider::boot. The vulnerability permits unauthorized access to installation functionality even after initial setup is complete, enabling attackers to achieve partial confidentiality, integrity, and availability impact. Publicly available exploit code exists (GitHub issue #314), and vendor has released patch commit 45758e4ec22451ab944ae2ae826b1e70f6450dc9.
Path traversal in InnoShop versions 0.8.0 through 0.8.2 allows remotely authenticated low-privilege users to delete arbitrary files on the server via the FileManagerController::destroyFiles function exposed through the panel REST API. The affected PHP e-commerce platform by yushine has no vendor-released patch - the vendor did not respond to responsible disclosure - and a public proof-of-concept exploit is available on GitHub. The CVSS 4.0 score of 2.1 reflects limited per-request impact (low integrity, low availability, no confidentiality loss), but the unpatched status combined with public exploit code elevates operational urgency for any deployment.
InnoShop e-commerce platform versions up to 0.7.8 allow unauthenticated remote attackers to bypass authentication controls in the installation endpoint via improper authentication handling in InstallServiceProvider::boot. The vulnerability permits unauthorized access to installation functionality even after initial setup is complete, enabling attackers to achieve partial confidentiality, integrity, and availability impact. Publicly available exploit code exists (GitHub issue #314), and vendor has released patch commit 45758e4ec22451ab944ae2ae826b1e70f6450dc9.