| عنوان | ShopXO ShopXO enterprise-level e-commerce system <=6.4.0 Template injection |
|---|
| الوصف | ShopXO is an open-source enterprise-level e-commerce system developed by ShopXO. In versions 6.4 and earlier, a vulnerability classified as critical was discovered. The incomplete filtering in ThemeAdminService allows for remote code execution (RCE). |
|---|
| المصدر | ⚠️ https://github.com/jmx0hxq/Vulnerability-learning/blob/main/shopxo-rce.md |
|---|
| المستخدم | jmx0hxq (UID 63891) |
|---|
| ارسال | 14/02/2025 02:57 PM (1 سنة منذ) |
|---|
| الاعتدال | 23/02/2025 08:00 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 296601 [ShopXO حتى 6.4.0 Template ThemeAdminService.php تجاوز الصلاحيات] |
|---|
| النقاط | 16 |
|---|