| 标题 | ShopXO ShopXO enterprise-level e-commerce system <=6.4.0 Template injection |
|---|
| 描述 | ShopXO is an open-source enterprise-level e-commerce system developed by ShopXO. In versions 6.4 and earlier, a vulnerability classified as critical was discovered. The incomplete filtering in ThemeAdminService allows for remote code execution (RCE). |
|---|
| 来源 | ⚠️ https://github.com/jmx0hxq/Vulnerability-learning/blob/main/shopxo-rce.md |
|---|
| 用户 | jmx0hxq (UID 63891) |
|---|
| 提交 | 2025-02-14 14時57分 (2 年前) |
|---|
| 管理 | 2025-02-23 08時00分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 296601 [ShopXO 直到 6.4.0 Template ThemeAdminService.php 权限提升] |
|---|
| 积分 | 16 |
|---|