CVE-2026-112035

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035

A security vulnerability exists in aircheng-org iWebShop-5 up to version 5.16 . The flaw is located in the send_message_mobile function within the controllers/simple.php file. By manipulating the user_id argument, an attacker can exploit a weak password recovery mechanism (CWE-640). This attack c...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

EUVD-2026-104028

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...