159 matches found
phpshe1.6后台任意文件删除导致重装getshell
...
PHPSHE 1.6 userbank sql注入
PHPSHE 1.6 userbank sql注入 漏洞描述 PHPSHE商城系统是将商品展示、在线购物、订单管理、支付管理、文章管理、客户咨询反馈等功能相结合，为用户提供了网上商城建设方案。 PHPSHE开源商城系统userbank页面存在SQL注入漏洞，由于系统未能对用户输入的参数进行严格过滤。攻击者可利用该漏洞获取数据库敏感信息。 漏洞分析 www/module/admin/userbank.php 文件 存在漏洞 default: $gname && $sqlwhere .= " and username like '%$gname%'"; $gtname && $sqlwher...
SQL Injection Vulnerability in PHPSHE 1.6
PHPSHE mall system combines the functions of product display, online shopping, order management, payment management, article management, customer consultation and feedback to provide users with online shopping mall construction program. A SQL injection vulnerability exists in the pointlog.php fil...
SQL Injection Vulnerability in PHPSHE Online Shopping Mall System
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. The user.php page in version v1.6 of the PHPSHE online shopping mall system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain...
PHPSHE open source mall system order.php page exists out of rights access vulnerability
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system order.php page ther...
PHPSHE open source mall system class_id parameter SQL injection vulnerabilities exist
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system classid parameter S...
SQL Injection Vulnerability in Brand_id Parameter of PHPSHE B2C Mall System
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. A SQL injection vulnerability exists in the brandi...
SQL Injection Vulnerability in PHPSHE B2C Mall System v1.5
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy operation, practical features, quickly allow users to establish a personalized online store,...
Command Execution Vulnerability in PHPSHE B2C Mall System v1.5
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. A command execution vulnerability exists in PHPSHE B2C Mall System v1.5. Attackers can use this vulnerability to execute commands, such as arbitrarily deleting files,...
Multiple XSS Vulnerabilities in PHPSHE B2C Mall System v1.5
PHPSHE online shopping mall system provides users with a low-cost, high-efficiency online shopping mall construction program. Multiple XSS vulnerabilities exist in PHPSHE B2C Mall System v1.5. An attacker can exploit this vulnerability to obtain information such as login cookies of administrative...
phpshe backend arbitrary file deletion vulnerability
PHPSHE is the online shopping mall building program. An arbitrary file deletion vulnerability exists in the backend of phpshe. Attackers can utilize the vulnerability to obtain unlimited shell...
phpshe v1.1 user.php sql注入
No description provided by source...
phpshe v1.1 任意文件上传漏洞
No description provided by source...
phpshe v1.1 module/index/order.php sql注入
No description provided by source...
phpshe v1.1 order.php 存在变量覆盖漏洞(导致可绕过付款)
No description provided by source...
phpshe v1.1 安装文件任意代码执行
No description provided by source...
phpshe v1.1 index.php存在本地包含漏洞可getshell
No description provided by source...