{"items":[{"id":"CVE-2019-8292","published":"2019-10-01T19:53:28.000Z","updated":"2024-08-04T21:17:30.505Z","title":"Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.","severity":"MEDIUM","score":5.3,"vendor":"abcprintf","product":"Online Store","kev":false,"epss":0.01886,"kevAdded":null},{"id":"CVE-2019-8291","published":"2019-10-01T19:53:28.000Z","updated":"2024-08-04T21:17:31.357Z","title":"Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.","severity":"HIGH","score":7.5,"vendor":"abcprintf","product":"Online Store","kev":false,"epss":0.01407,"kevAdded":null},{"id":"CVE-2019-8290","published":"2019-10-01T19:53:28.000Z","updated":"2024-08-04T21:17:30.470Z","title":"Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php…","severity":"MEDIUM","score":6.1,"vendor":"abcprintf","product":"Online Store","kev":false,"epss":0.0116,"kevAdded":null},{"id":"CVE-2019-8289","published":"2019-10-01T19:53:28.000Z","updated":"2024-08-04T21:17:31.149Z","title":"Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable","severity":"MEDIUM","score":5.4,"vendor":"abcprintf","product":"Online Store","kev":false,"epss":0.00756,"kevAdded":null},{"id":"CVE-2019-8288","published":"2019-10-01T19:53:28.000Z","updated":"2024-08-04T21:17:30.693Z","title":"Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.","severity":"MEDIUM","score":5.4,"vendor":"abcprintf","product":"Online Store","kev":false,"epss":0.00765,"kevAdded":null}]}