← Back

Tinyshop

tinyshop

Vendor: Tinyrise • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tinyrise
1Tinyshop
Jun 17, 2026
Mar 25, 2022
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms.