CVE-2017-16614

SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...

CVE-2017-16614: Server-Side Request Forgery (SSRF)

SSRF Server Side Request Forgery in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the plugins/payment/weixin/lib/WxPay.tedatac.php fBill parameter...

PT-2018-6297

Name of the Vulnerable Software and Affected Versions: tpshop versions 2.0.5 through 2.0.6 Description: The issue allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution. This is achieved via the fBill parameter in the...