提交 #365173: Shanghai Zongzig Technology Co. Shopxo E-commerce platform <=ShopXO v6.1.0 Cross-Site Request Forgery

A vulnerability classified as critical has been discovered in Shopxo. This affects the remote part of the file Uploader.php. Manipulation of the parameter "source" leads to Cross-Site Request Forgery

• 来源: ⚠️ https://github.com/J1rrY-learn/learn/blob/main/shopxo_ssrf.md
• 用户: J1rrY (UID 64327)
• 提交: 2024-06-27 07時44分 (2 年前)
• 管理: 2024-07-05 06時50分 (8 days later)
• 状态: 已接受
• VulDB条目: 270367 [ShopXO 直到 6.1.0 extend/base/Uploader.php source 权限提升]
• 积分: 16