Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:56 p.m.•19 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.8CVSS9.1AI score0.03789EPSS
SaveExploits1
osv_cve
osv_cve
•added 2021/04/28 2:15 p.m.•20 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.8CVSS7.7AI score0.03789EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/28 2:15 p.m.•30 views

Sql injection

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

7.5CVSS9.9AI score0.03789EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/28 1:22 p.m.•55 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.9AI score0.03789EPSS
SaveExploits1References1
CVE
CVE
•added 2021/04/28 1:22 p.m.•71 views

CVE-2020-18020

PHPSHE Mall System v1.7 suffers an SQL injection in the user_phone parameter of admin.php, enabling remote attackers to execute arbitrary SQL and potentially compromise the system. Root cause: improper handling of input in the user_phone field. Impact notes: remote code execution is stated in the...

9.8CVSS9.9AI score0.03789EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/28 12:00 a.m.•11 views

CVE-2020-18020: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.8CVSS6.5AI score0.03789EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/04/28 12:00 a.m.•21 views

PHPSHE Mall System SQL注入漏洞

PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A security vulnerability exists in PHPSHE Mall System v1.7 that allows remote attacke...

9.8CVSS9.2AI score0.03789EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/28 12:00 a.m.•5 views

PT-2021-10118

Name of the Vulnerable Software and Affected Versions: PHPSHE Mall System version 1.7 Description: The issue allows remote attackers to execute arbitrary code by injecting SQL commands into the user phone parameter of a crafted HTTP request to the "admin.php" component. This enables attackers to...

9.8CVSS0.03789EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/03/15 12:00 a.m.•10 views

SQL Injection Vulnerability in PHPSHE Mall System PC Version

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy to operate, practical features, quickly allow users to establish a personalized online store...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/05 12:00 a.m.•7 views

Arbitrary File Deletion Vulnerability in PHPSHE Mall System

PHPSHE online shopping mall system has all the basic functions required for e-commerce retail business, providing users with a low-cost, high-efficiency online shopping mall construction program. PHPSHE mall system has an arbitrary file deletion vulnerability, which can be exploited by attackers ...

7AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/06 12:00 a.m.•16 views

PHPSHE mall system 1.7 background exists arbitrary file deletion vulnerability

PHPSHE Mall System V1.7 is an online mall building system based on PHP5.2+/MySQL 5.0+. PHPSHE Mall System 1.7 background there are arbitrary file deletion vulnerability, the vulnerability stems from the absence of directory checks, attackers can use the vulnerability to delete any file server...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2019/06/14 12:00 a.m.•9 views

PHPSHE Mall System v1.7 Exists Arbitrary File Deletion Vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE Mall System v1.7 exists arbitrary file...

7AI score
SaveExploits0
CNVD
CNVD
•added 2019/05/05 12:00 a.m.•6 views

SQL Injection Vulnerability in PHPSHE Mall System (CNVD-2019-15927)

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE Mall System suffers from a SQL injection...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/04/20 12:00 a.m.•8 views

SQL Injection Vulnerability in PHPSHE Mall System v1.7

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE Mall System v1.7 suffers from a SQL injecti...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/26 12:00 a.m.•12 views

SQL Injection Vulnerability in PHPSHE B2C Mall System v1.7ca***.php

PHPSHE B2C mall system is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. PHPSHE B2C Mall System v1.7ca.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2018/08/02 12:00 a.m.•12 views

SQL Injection Vulnerability in PHPSHE Mall System

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. A SQL injection vulnerability exists in PHPSHE Mal...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2017/08/23 12:00 a.m.•9 views

PHPSHE open source mall system class_id parameter SQL injection vulnerabilities exist

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system classid parameter S...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2017/07/25 12:00 a.m.•12 views

SQL Injection Vulnerability in Brand_id Parameter of PHPSHE B2C Mall System

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. A SQL injection vulnerability exists in the brandi...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2017/07/11 12:00 a.m.•12 views

SQL Injection Vulnerability in PHPSHE B2C Mall System v1.5

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy operation, practical features, quickly allow users to establish a personalized online store,...

8.1AI score
SaveExploits0
Rows per page
Query Builder