CVE-2026-90710

A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipulation of the argument httpUrl can lead to server-side reque...

File Upload Vulnerability in ShopXO B2C ThemeService

ShopXO is a secure, stable, high-performance enterprise-level B2C open source e-commerce system. ShopXO B2C ThemeService file upload vulnerability , an attacker can exploit the vulnerability to obtain web server privileges...