CVE-2007-3936: A-Shop

Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter.

Affected products

• A-Shop A-Shop: up to and including 0.70; up to and including 0.71

Published 2007-07-21. Last modified 2026-06-16.