Lucene search
+L

159 matches found

Prion
Prion
added 2022/03/30 6:15 p.m.18 views

Code injection

phpshe V1.8 is affected by a denial of service DoS attack in the registry's verification code, which can paralyze the target service...

5CVSS7.4AI score0.01054EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/30 5:11 p.m.44 views

CVE-2022-24132

phpshe V1.8 is affected by a denial of service DoS attack in the registry's verification code, which can paralyze the target service...

7.6AI score0.01054EPSS
Exploits1References1
CVE
CVE
added 2022/03/30 5:11 p.m.75 views

CVE-2022-24132

CVE-2022-24132 affects phpshe V1.8. The vulnerability is a denial of service in the registry verification/authentication path caused by mishandling a large number of message requests, potentially paralyzing the target service. Exploitation details are not provided beyond the DoS effect in the reg...

7.5CVSS7.4AI score0.01054EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.28 views

PHPSHE 安全漏洞

PHPSHE is a set of online shopping mall system of Lingbao Jane Good Network Technology Co. The system supports express tracking, online chat, order evaluation and statistics and other functions. A denial-of-service vulnerability exists in PHPSHE version V1.8, which originates from mishandling a...

7.5CVSS5.7AI score0.01054EPSS
Exploits1References2
OSV
OSV
added 2021/04/28 2:15 p.m.3 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.8CVSS7.7AI score0.03789EPSS
Exploits1References1
Prion
Prion
added 2021/04/28 2:15 p.m.17 views

Sql injection

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

7.5CVSS9.9AI score0.03789EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/04/28 1:22 p.m.49 views

CVE-2020-18020

PHPSHE Mall System v1.7 suffers an SQL injection in the user_phone parameter of admin.php, enabling remote attackers to execute arbitrary SQL and potentially compromise the system. Root cause: improper handling of input in the user_phone field. Impact notes: remote code execution is stated in the...

9.8CVSS9.9AI score0.03789EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/04/28 1:22 p.m.36 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.9AI score0.03789EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/04/28 12:0 a.m.5 views

PHPSHE Mall System SQL注入漏洞

PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A security vulnerability exists in PHPSHE Mall System v1.7 that allows remote attacke...

9.8CVSS9.2AI score0.03789EPSS
Exploits1References2
CNVD
CNVD
added 2021/03/15 12:0 a.m.4 views

SQL Injection Vulnerability in PHPSHE Mall System PC Version

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy to operate, practical features, quickly allow users to establish a personalized online store...

7.5AI score
Exploits0
CNVD
CNVD
added 2021/02/24 12:0 a.m.8 views

PHPSHE SQL Injection Vulnerability (CNVD-2021-14156)

PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in PHPSHE, which stems from the lack of validati...

8.8CVSS7.8AI score0.01986EPSS
Exploits1References1
OSV
OSV
added 2021/02/09 7:15 p.m.4 views

CVE-2020-18215

Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the 1 adid, 2 menuid, and 3 cashoutid parameters, which could let a remote malicious user execute arbitrary code...

8.8CVSS6.1AI score0.01986EPSS
Exploits1References2
NVD
NVD
added 2021/02/09 7:15 p.m.24 views

CVE-2020-18215

Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the 1 adid, 2 menuid, and 3 cashoutid parameters, which could let a remote malicious user execute arbitrary code...

8.8CVSS0.01986EPSS
Exploits1References2
Prion
Prion
added 2021/02/09 7:15 p.m.18 views

Sql injection

Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the 1 adid, 2 menuid, and 3 cashoutid parameters, which could let a remote malicious user execute arbitrary code...

6.5CVSS9.3AI score0.01986EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/02/09 6:56 p.m.45 views

CVE-2020-18215

PHPSHE 1.7 has multiple SQL injection vulnerabilities in phpshe/admin.php via ad_id, menu_id and cashout_id parameters. Root cause: unsanitized input enabling SQL injection and potential remote code execution. Impact: arbitrary code execution on affected servers per the CVE descriptions. No patch...

8.8CVSS9.2AI score0.01986EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/02/09 6:56 p.m.27 views

CVE-2020-18215

Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the 1 adid, 2 menuid, and 3 cashoutid parameters, which could let a remote malicious user execute arbitrary code...

9.3AI score0.01986EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.8 views

PHPSHE SQL注入漏洞

PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in PHPSHE, which stems from the lack of validati...

8.8CVSS7.5AI score0.01986EPSS
Exploits1References2
CNVD
CNVD
added 2020/12/14 12:0 a.m.8 views

PHPSHE SQL Injection Vulnerability (CNVD-2021-14165)

PHPSHE is a set of online shopping mall system of China PHPSHE company. The system supports express tracking, online chat, order evaluation and statistics. SQL injection vulnerability exists in PHPSHE 1.7. An attacker can exploit this vulnerability by using the admin.php?mod=user&userlevelid=1...

9.8CVSS7.6AI score0.01594EPSS
Exploits1References1
OSV
OSV
added 2020/12/11 7:15 p.m.7 views

CVE-2020-19165

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevelid=1 userlevelid parameter...

9.8CVSS7.3AI score0.01594EPSS
Exploits1References1
NVD
NVD
added 2020/12/11 7:15 p.m.24 views

CVE-2020-19165

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevelid=1 userlevelid parameter...

9.8CVSS9.9AI score0.01594EPSS
Exploits1References1
Rows per page
Query Builder