| शीर्षक | ShopXO 6.7.1 Server-Side Request Forgery |
|---|
| विवरण | A vulnerability has been found in Gong Fuxiang ShopXO V6.7.1. Affected is the function saveRemote of the file
extend/base/Uploader.php of the component UEditor Remote Crawler. The manipulation of the argument source leads to
server-side request forgery. The attack can be initiated remotely. No authentication is required for exploitation. The
vendor's IP filter relies only on FILTER_FLAG_NO_PRIV_RANGE and therefore does not reject loopback, link-local or
other reserved ranges; the downstream cURL transport additionally follows HTTP redirects without re-validating the
destination, providing a secondary bypass primitive. The exploit has been disclosed to the public and may be used. |
|---|
| स्रोत | ⚠️ https://github.com/yunyan05/MYCVE/tree/main/ShopXO/V6.7.1-Unauthenticated-SSRF |
|---|
| उपयोगकर्ता | yunyan05 (UID 90348) |
|---|
| सबमिशन | 15/05/2026 04:12 AM (5 महीनों पहले) |
|---|
| संयम | 14/06/2026 01:53 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 270367 [ShopXO तक 6.1.0 extend/base/Uploader.php source अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|