7 matches found
JPShop Security Vulnerability
JPShop is an open source community group-buying micro-mall applet. A security vulnerability exists in Juanpao JPShop version 1.5.02 and earlier versions, which stems from an incorrect operation of the parameter picurl that can lead to unrestricted uploads...
PT-2024-17676 · Juanpao · Jpshop
Name of the Vulnerable Software and Affected Versions: Juanpao JPShop versions up to 1.5.02 Description: A critical issue has been found in the API component, specifically affecting the actionUpdate function of the /api/controllers/merchant/design/MaterialController.php file. The manipulation of...
JPShop Code Issue Vulnerability
JPShop is an open source community group-buying micro-mall applet. A code issue vulnerability exists in Juanpao JPShop version 1.5.02 and prior versions, which stems from an incorrect operation of the parameter picurl that can lead to unrestricted uploads...
JPShop Code Issue Vulnerability
JPShop is an open source community group-buying micro-mall applet. A code issue vulnerability exists in Juanpao JPShop version 1.5.02 and prior versions, which stems from an incorrect operation of the parameter picurl that can lead to unrestricted uploads...
PT-2024-17671 · Juanpao · Juanpao Jpshop
Name of the Vulnerable Software and Affected Versions: Juanpao JPShop versions up to 1.5.02 Description: A critical vulnerability has been found in Juanpao JPShop, affecting the actionIndex function of the /api/controllers/admin/app/ComboController.php file in the API component. The manipulation ...
Juanpao JPShop Security Vulnerability
JPShop is an open source community group buying micro mall applet. A security vulnerability exists in Juanpao JPShop version 1.5.02 and prior versions, which stems from the use of hard-coded keys...
Juanpao JPShop Code Issue Vulnerability
JPShop is an open source community group-buying micro-mall applet. A code issue vulnerability exists in Juanpao JPShop version 1.5.02 and prior versions, which stems from an incorrect operation of the parameter apppicurl that can lead to unrestricted uploads...