10 matches found
EUVD-2020-10091
Malware in sbrugna...
CVE-2020-18164
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...
CVE-2020-18164
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...
Sql injection
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...
CVE-2020-18164
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...
CVE-2020-18164
CVE-2020-18164 affects tp-shop 2.x–3.x, with an SQL Injection in the /index.php/home/api/shop fBill parameter. Root cause: unsafely constructed SQL queries exposed via the fBill input. Impact per sources: high severity (NVD CVSS v3.1: 9.8, CRITICAL; v2.0: 7.5, HIGH) with network access and no aut...
TPshop SQL注入漏洞
TPshop is a new retail smart e-commerce ecosystem. TPshop security vulnerability, the vulnerability stems from the index.php home api store fBill parameter may lead to SQL injection vulnerability...
CVE-2017-16614
SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...
CVE-2017-16614
SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...
Server side request forgery (ssrf)
SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...