Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ShopXO 代码问题漏洞
Vulnerability Description
ShopXO是一套开源的企业级开源电子商务系统。 ShopXO v1.9.0存在安全漏洞，该漏洞源于application/service/PluginsAdminService.php中的PluginsUpload函数包含一个任意文件上传。攻击者可通过上传制作的PHP文件来执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A