| Título | shopxo v6.5 Remote Code Execution |
|---|
| Descrição | There is a vulnerability in the Payment.php file of ShopXO v6.5.0 that allows an attacker to execute arbitrary PHP code via a crafted zip file upload. The vulnerability occurs due to improper file handling and lack of adequate validation when extracting files from a zip archive.
|
|---|
| Fonte | ⚠️ https://github.com/147536951/Qiany1/blob/main/shopxo6.5.pdf |
|---|
| Utilizador | Qianyi (UID 71159) |
|---|
| Submissão | 02/05/2025 09h05 (há 1 Ano) |
|---|
| Moderação | 23/05/2025 08h28 (21 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 310085 [zongzhige ShopXO 6.5.0 ZIP File Payment.php Upload params Elevação de Privilégios] |
|---|
| Pontos | 17 |
|---|