159 matches found
PHPSHE B2C Mall System V1.7 SQL Injection Vulnerability in Background
PHPSHE B2C mall system is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. PHPSHE B2C Mall System V1.7 has a SQL injection vulnerability in the background. An attacker can exploit the vulnerability to obtain sensitive database...
PHPSHE Arbitrary File Deletion Vulnerability
PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A security vulnerability exists in the admin.php?mod=db&act=del script in PHPSHE version 1.7. A remote attacker can exploit this vulnerability to delete arbitrary files wi...
PHPSHE SQL Injection Vulnerability
PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A SQL injection vulnerability exists in the admin.php?mod=user&act=del script in PHPSHE version 1.7. A remote attacker can exploit this vulnerability to execute arbitrary...
CVE-2018-18486
An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del userid parameter...
CVE-2018-18485
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock...
CVE-2018-18486
An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del userid parameter...
CVE-2018-18485
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock...
Directory traversal
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock...
Sql injection
An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del userid parameter...
CVE-2018-18485
PHPSHE 1.7 contains an arbitrary-file-deletion vulnerability in admin.php?mod=db&act=del, exploitable via directory traversal in the dbname parameter. Successful exploitation allows a remote attacker to delete arbitrary files, including install.lock, potentially reloading the product. The connect...
CVE-2018-18485
An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock...
CVE-2018-18486
PHPSHE 1.7 is affected by a SQL injection in the admin.php?mod=user&act=del script, exploitable via the user_id[] parameter. The vulnerability permits remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (e.g., CNVD-2018-21603, NVD CVE-2018-18486). No rem...
CVE-2018-18486
An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del userid parameter...
SQL Injection Vulnerability in PHPSHE Mall System
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. A SQL injection vulnerability exists in PHPSHE Mal...
PHPSHE 'userbank' Parameter SQL Injection Vulnerability
PHPSHE is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. A SQL injection vulnerability exists in the 'userbank' parameter in PHPSHE version 1.6. A remote attacker can exploit this vulnerability to execute SQL commands...
CVE-2018-8943
There is a SQL injection in the PHPSHE 1.6 userbank parameter...
Sql injection
There is a SQL injection in the PHPSHE 1.6 userbank parameter...
CVE-2018-8943
There is a SQL injection in the PHPSHE 1.6 userbank parameter...
CVE-2018-8943
PHPSHE 1.6 contains a SQL injection in the userbank parameter. Multiple sources (CNVD, NVD, RH-CVE entries) confirm a SQL injection vulnerability that could enable a remote attacker to execute SQL commands. The exact exploitation status and available patches are not provided in the supplied docum...