Vendors / Laiketui Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now Laiketui records in CISA KEV No Laiketui vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01768 · Published 2022-06-23 · No fix listed CWE-434
Priority MEDIUM 43
A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00596 · Published 2023-09-15 · No fix listed CWE-434
Priority MEDIUM 43
A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00603 · Published 2023-08-27 · No fix listed CWE-434
Priority MEDIUM 41
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pa…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01485 · Published 2021-06-15 · No fix listed CWE-434
Priority MEDIUM 40
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00998 · Published 2021-09-15 · No fix listed CWE-352
Priority LOW 39
LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01745 · Published 2021-06-15 · No fix listed CWE-22
Priority LOW 35
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01113 · Published 2022-06-23 · No fix listed CWE-89
Priority LOW 34
SQL injection exists in LaiKetui v3.5.0 the background administrator list.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00996 · Published 2022-06-23 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
3 5 0 0 0
THREATIST.IORead the docs