CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.php

• CWE-862

• https://github.com/XOS-Shop/xos_shop_system/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/XOS-Shop/xos_shop_system/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Jun 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-46813Vulnerability of residual files not being deleted after an u…7.5
• CVE-2021-46814The video framework has an out-of-bounds memory read/write v…7.5
• CVE-2021-46815Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-46816Adobe Premiere Pro version 15.4 (and earlier) are affected b…7.8
• CVE-2021-46817Adobe Media Encoder version 15.4 (and earlier) are affected …7.8
• CVE-2021-46818Adobe Media Encoder version 15.4 (and earlier) are affected …7.8
• CVE-2021-46822The PPM reader in libjpeg-turbo through 2.0.90 mishandles us…5.5
• CVE-2021-46823python-ldap before 3.4.0 is vulnerable to a denial of servic…6.5
• CVE-2021-46824Cross Site Scripting (XSS) vulnerability in sourcecodester S…5.4
• CVE-2021-46825Symantec Advanced Secure Gateway (ASG) and ProxySG are susce…9.1
• CVE-2021-46827An issue was discovered in Oxygen XML WebHelp before 22.1 bu…6.1
• CVE-2021-46828In libtirpc before 1.3.3rc1, remote attackers could exhaust …7.5