Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Export and Import Users and Customers — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Export and Import Users and Customers, with AI-generated Chinese analysis, references, and POCs.

Vendor: webtoffee

CVE IDTitleCVSSSeverityPublished
CVE-2025-1973 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function CWE-22 4.9 Medium2025-03-22
CVE-2025-1970 Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function CWE-918 7.6 High2025-03-22
CVE-2025-1971 Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter CWE-502 7.2 High2025-03-22
CVE-2025-1972 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function CWE-73 2.7 Low2025-03-22
CVE-2023-6558 Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload CWE-434 7.2 High2024-01-11
CVE-2023-3459 Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change CWE-863 7.2 High2023-07-18

All 6 known CVE vulnerabilities affecting Export and Import Users and Customers with full Chinese analysis, references, and POCs where available.