2 matches found
CVE-2017-16614
SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...
9.8CVSS9.8AI score0.02923EPSS
SaveExploits1References1
CVE-2017-16614: Server-Side Request Forgery (SSRF)
SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...
9.8CVSS8.4AI score0.02923EPSS
SaveExploits1References2
20