phpshe phpshe 1.7 vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, which could let a remote malicious user execute arbitrary code.

Phpshe Phpshe 1.7

7.2

CVSSv3

PHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.

Phpshe Phpshe 1.7

9.8

CVSSv3

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.

Phpshe Phpshe 1.7

7.2

CVSSv3

PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.

Phpshe Phpshe 1.7

9.8

CVSSv3

PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.

Phpshe Phpshe 1.7

7.5

CVSSv3

An XXE issue exists in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.

Phpshe Phpshe 1.7

9.8

CVSSv3

A SQL Injection exists in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.

Phpshe Phpshe 1.7

7.5

CVSSv3

An issue exists in PHPSHE 1.7. admin.php?mod=db&act=del allows remote malicious users to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock.

Phpshe Phpshe 1.7

9.8

CVSSv3

An issue exists in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter.

Phpshe Phpshe 1.7

9.8

CVSSv3

SQL Injection in PHPSHE Mall System v1.7 allows remote malicious users to execute arbitrary code by injecting SQL commands into the "user_phone" parameter of a crafted HTTP request to the "admin.php" component.

Phpshe Mall System 1.7

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook