CVE-2019-7753

Verydows 2.0 has XSS via the index.php?m=api=stats=count referrer parameter...

EUVD-2019-17281

Malware in sbrugna...

EUVD-2019-17753

Malware in sbrugna...

EUVD-2019-17266

Malware in sbrugna...

EUVD-2020-16110

Malware in sbrugna...

EUVD-2025-10666

Malicious code in bioql PyPI...

EUVD-2022-32544

Malicious code in bioql PyPI...

EUVD-2022-32543

Malicious code in bioql PyPI...

CVE-2023-51949

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /protected/controller/backend/rolecontroller...

CVE-2022-28059

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

CVE-2022-28058

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\filecontroller.php...

CVE-2020-23363

Cross Site Request Forgery CSRF vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code via a crafted script...

CVE-2025-29394

An insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type...

CVE-2025-29394

An insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type...

PT-2025-15701 · Verydows · Verydows

Name of the Vulnerable Software and Affected Versions: verydows version 2.0 Description: The issue is related to insecure permissions, allowing a remote attacker to execute arbitrary code by uploading a specific file type. This can be achieved through the action of loading a particular type of...

Verydows 安全漏洞

Verydows is a lightweight open source e-commerce management system developed using the PHP language. A security vulnerability exists in version 2.0 of verydows, which stems from an improper privilege setting that could allow a remote attacker to execute arbitrary code...

CVE-2025-29394

CVE-2025-29394 affects verydows v2.0. The issue is an insecure permissions flaw in file uploads that permits a remote attacker to execute arbitrary code. Root cause: improper handling of uploaded files (permissions) enabling code execution. Evidence across sources confirms impact as remote code e...

CVE-2025-29394

An insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type...

CVE-2025-29394

An insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute arbitrary code by uploading a file type...

CVE-2023-51949

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /protected/controller/backend/rolecontroller...