description: Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.
problem types: unauthenticated arbitrary file deletions via path traversal
affected:
{
product: Online Store
vendor: abcprintf
versions:
lessThanOrEqual: 1.0, status: affected, version: unspecified, versionType: custom
}