File Upload Vulnerability in Niushop Multi-Merchant System

Shanghai Niuzhiyun Network Technology Co., Ltd. is engaged in mobile Internet, e-commerce software-led technology research and development-oriented enterprises. A file upload vulnerability exists in the Niushop multi merchant system. Attackers can utilize the vulnerability to upload webshell and...

SQL injection vulnerability at active order deletion on Tpshop Pr***.php page (CNVD-2019-17505)

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the deletion of active orders on the Tpshop Pr.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

Code Execution Vulnerability in UQCMS B2B2C Multi-merchant E-commerce System Backend Templates

B2B2C multi-merchant e-commerce system is combined with years of e-commerce development experience to launch the B2B2C multi-store system. There is a code execution vulnerability in the backend template of UQCMS B2B2C Multi-merchant E-commerce System. Attackers can use this vulnerability to write...