PT-2020-15199

Name of the Vulnerable Software and Affected Versions Niushop B2B2C Multi-Business Basic Edition version V1.11 Description The issue allows authentication to be bypassed, enabling administrators to reset any passwords without proper authorization. Recommendations For Niushop B2B2C Multi-Business...

CVE-2020-19670: Missing Authentication for Critical Function

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords...

PT-2020-15200

Name of the Vulnerable Software and Affected Versions Niushop B2B2C Multi-business basic version V1.11 Description The issue allows an attacker to bypass administrator access and obtain the background upload interface. By manipulating the upload parameter, it is possible to bypass the getimagesiz...

PT-2018-12585

Name of the Vulnerable Software and Affected Versions Niushop B2B2C Multi-business basic version V1.11 Description A file upload issue in the application/shop/controller/member.php file allows remote members to upload .php files to the web server by modifying the filename and file content of an...