Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
灵宝简好网络科技 PHPSHE 安全漏洞
Vulnerability Description
灵宝简好网络科技 PHPSHE是中国灵宝简好网络科技公司的一套网上商城系统。该系统支持快递跟踪、在线聊天、订单评价和数据统计等功能。 灵宝简好网络科技 PHPSHE 1.7版本中存在XML外部实体注入漏洞。远程攻击者可利用该漏洞无需身份验证便可读取系统中的任意文件或扫描内部网络。
CVSS Information
N/A
Vulnerability Type
N/A