CVE-2020-26007

An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

PT-2022-8723

Name of the Vulnerable Software and Affected Versions ShopXO version 1.9.0 Description The issue allows attackers to execute arbitrary code via uploading a crafted PHP file, exploiting an arbitrary file upload vulnerability in the upload payment plugin. Recommendations For ShopXO version 1.9.0,...

ShopXO 代码问题漏洞

ShopXO is an open source enterprise-level open source e-commerce system. A security vulnerability exists in ShopXO v1.9.0, which originates from the upload of arbitrary files in the Upload Payment plugin. An attacker can execute arbitrary code by uploading a crafted PHP file...

CVE-2020-26007: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...