CVE-2026-112035

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035

A security vulnerability exists in aircheng-org iWebShop-5 up to version 5.16 . The flaw is located in the send_message_mobile function within the controllers/simple.php file. By manipulating the user_id argument, an attacker can exploit a weak password recovery mechanism (CWE-640). This attack c...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

EUVD-2026-104028

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035: Weak Password Recovery Mechanism for Forgotten Password

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

aircheng-org iWebShop Authorization Issue Vulnerability

aircheng-org iWebShop versions 5 and earlier have a vulnerability related to authorization issues. This vulnerability stems from incorrect handling of the parameter userid in the sendmessagemobile function found in the controllers/simple.php file. It may lead to the recovery of weak passwords, an...