Shopxo Security Vulnerabilities and Issues — Shopxo CVE List

Lucene search

ShopxoShopxo

2 matches found

CVE•added 2021/03/15 5:15 p.m.•42 views

CVE-2021-27817

A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is uploaded after modifying the phar suffix.

9.8CVSS9.6AI score0.01304EPSS

CVE•added 2021/04/14 2:15 p.m.•39 views

CVE-2020-19778

Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the HTML request.

9.8CVSS9.5AI score0.0086EPSS