CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php...

CVE-2017-8110

CVE-2017-8110 affects www.modified-shop.org’s eCommerce Shopsoftware 2.0.2.2 rev 10690, with an XML External Entity (XXE) vulnerability in api/it-recht-kanzlei/api-it-recht-kanzlei.php. The CNVD entry notes risk of reading arbitrary files or DoS via XXE; other sources corroborate the same vulnera...