13 matches found
CVE-2020-19672
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
Design/Logic Flaw
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
CVE-2020-19672
CVE-2020-19672 affects Niushop B2B2C Multi-business basic version V1.11. The vulnerability allows bypassing the administrator to access the background upload interface, exploiting an upload parameter to bypass getimagesize and upload a PHP file, leading to getshell. This is what the provided docu...
CVE-2020-19672
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
CVE-2020-19670
Technical details are not publicly available in the provided connected documents for CVE-2020-19670 (Niushop 1.11 authentication bypass). Monitor for updates; no concrete root-cause, affected components, or remediation details are present in the supplied sources.
CVE-2020-19670
In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords...
CVE-2020-19670: Missing Authentication for Critical Function
In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords...
PT-2020-15200
Name of the Vulnerable Software and Affected Versions Niushop B2B2C Multi-business basic version V1.11 Description The issue allows an attacker to bypass administrator access and obtain the background upload interface. By manipulating the upload parameter, it is possible to bypass the getimagesiz...
PT-2020-15199
Name of the Vulnerable Software and Affected Versions Niushop B2B2C Multi-Business Basic Edition version V1.11 Description The issue allows authentication to be bypassed, enabling administrators to reset any passwords without proper authorization. Recommendations For Niushop B2B2C Multi-Business...
CVE-2020-19672: Unrestricted Upload of File with Dangerous Type
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
CVE-2018-14570
CVE-2018-14570 describes a file upload vulnerability in Niushop B2B2C Multi-business basic version V1.11. The flaw exists in the file application/shop/controller/member.php and allows any remote member to upload a PHP file to the web server through the profile avatar field by using an image Conte...
CVE-2018-14570: Unrestricted Upload of File with Dangerous Type
A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a .php file to the web server via a profile avatar field, by using an image Content-Type e.g., image/jpeg with a modified filename and file...
PT-2018-12585
Name of the Vulnerable Software and Affected Versions Niushop B2B2C Multi-business basic version V1.11 Description A file upload issue in the application/shop/controller/member.php file allows remote members to upload .php files to the web server by modifying the filename and file content of an...