EUVD-2022-3125

Malicious code in bioql PyPI...

CVE-2021-41938

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations...

CVE-2021-41938

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations...

Privilege escalation

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations...

CVE-2021-41938

An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations...

CVE-2021-41938

CVE-2021-41938 affects ShopXO CMS 2.2.0. The issue is an arbitrary file upload vulnerability in three locations on the management page, caused by upload functions not properly restricting file types/paths. The CVSS-based assessment indicates a high-severity impact (3.1: HIGH, network access, unli...