159 matches found
CVE-2025-3553
A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pedelete of the file /admin.php?mod=brand=del. The manipulation of the argument brandid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed t...
CVE-2025-3554
A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the...
CVE-2025-3554
A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron&act=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to...
CVE-2025-3554
A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron&act=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to...
CVE-2025-3554 phpshe api.php cross site scripting
A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron&act=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to...
CVE-2025-3554 phpshe api.php cross site scripting
A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron&act=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to...
CVE-2025-3554
Phpshe 1.8 is affected by CVE-2025-3554 due to improper handling of the act parameter in api.php?mod=cron&act=buyer, which enables cross-site scripting. The vulnerability is exploitable remotely. The PT-2025-16207 advisory confirms the issue and suggests remediation: restrict access to the api.ph...
CVE-2025-3553
A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pedelete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brandid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-3553
A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pedelete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brandid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-3553 phpshe admin.php pe_delete sql injection
A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pedelete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brandid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-3553 phpshe admin.php pe_delete sql injection
A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pedelete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brandid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-3553
Phpshe 1.8 contains a SQL injection in the pe_delete function at /admin.php?mod=brand&act=del, triggered by manipulating the brand_id[] parameter. The vulnerability can be exploited remotely and has public exploits. Mitigations from PT-2025-16206 include disabling the pe_delete endpoint and restr...
PHPSHE 代码注入漏洞
PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE company. The system supports express tracking, online chat, order evaluation and statistics and other functions. PHPSHE 1.8 version of the existence of code injection vulnerability, the vulnerabilit...
PT-2025-16207 · Phpshe · Phpshe
Name of the Vulnerable Software and Affected Versions: phpshe version 1.8 Description: A problem was found in the processing of the file "api.php?mod=cron&act=buyer". The manipulation of the act argument leads to cross-site scripting. The attack may be initiated remotely. Recommendations: For...
PT-2025-16206 · Phpshe · Phpshe
Name of the Vulnerable Software and Affected Versions: phpshe version 1.8 Description: A critical issue has been identified, affecting the pe delete function in the /admin.php?mod=brand&act=del endpoint. The manipulation of the brand id argument leads to SQL injection. This issue can be exploited...
VulnCheck KEV: CVE-2019-9762
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
PHPSHE denial of service vulnerability
PHPSHE is a set of online shopping mall system of Lingbao Jane Good Network Technology Co. The system supports express tracking, online chat, order evaluation and statistics and other functions. A denial-of-service vulnerability exists in PHPSHE version V1.8, which originates from mishandling a...
CVE-2022-24132
phpshe V1.8 is affected by a denial of service DoS attack in the registry's verification code, which can paralyze the target service...
