Vendors / Niushop Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 3
Exploited now Niushop records in CISA KEV No Niushop vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01347 · Published 2020-09-30 · No fix listed CWE-434
Priority LOW 39
NIUSHOP V1.11 has CSRF via search_info to index.php.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00603 · Published 2019-09-14 · No fix listed CWE-352
Priority LOW 25
NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00637 · Published 2019-09-14 · No fix listed CWE-79
Priority LOW 24
In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00872 · Published 2020-09-30 · No fix listed CWE-306
Open these records in search → All records by CVSS severity
4 3 3 0 0
