EIP-2026-114481

This exploit demonstrates an arbitrary file deletion vulnerability in XOS Shop 1.0.9, where an authenticated attacker can delete any file on the server by manipulating the 'current_manufacturer_image' or 'current_category_image' parameters in admin panel requests.