The disclosure of this issue has been credited to Nick Gudov <email@example.com>.
CactuSoft CactuShop Lite 5.0
It has been reported that Cactusoft CactuShop Lite may be prone to a remote arbitrary file deletion vulnerability that may allow remote attackers to delete arbitrary files on a vulnerable system. The problem is reported to be caused by user-supplied data passed via the 'strEmailAddress' variable of the AddToMailingList() function. This problem is reported to be a backdoor that allows attackers to delete arbitrary files from a vulnerable system leading to a denial of service issue.
It should be noted that Cactusoft CactuShop Lite is demo software and not intended by the vendor for commercial use.
Cactusoft CactuShop Lite version 5.0 has been reported to be prone to this issue.
No exploit is required.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: firstname.lastname@example.org <mailto:email@example.com>.